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INTRODUCTION 


rrr 


‘One does not need to be a professional thief or aspising burglar to 
‘cap benefits irom this book. Although it sometimes read like a How- 
‘To manual, it was writen primarily to show homeowners their 
‘vulnerabilities, to teach law enforcement official's some tricks of the 
‘burglar trade, and to inspire buplar alarm manufacturers and installers 
to seek new methods of deterring and detecting burglary. This book 
{does not give profesional burlars any information tht they do. not 
already possess, and I believe that society is best served when 
information i available to all, rather than to & select few. Burglar 
alarm jumpering and bypassing is mere radecrat fr the profesional 
‘burglar, bon printed information on the methodology of this rare 
science i care, to say the last. 


Burglar slaums are always installed for one reason: vo protect 
something. Whether is valuables, one's Wil, items of sentimental 
valu ty the objective ofthe burglar alarm remains the same. Long 
ago, people wed the safety of high walls and castles to protect 
‘emseves and thet propery. Later, the keylock was invented 10 
protect valuables, and today We have high-security locks, vaults and 
Alarms: Human guards have Been used throughout history to protect 
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assets, and the modem burglar alarm is simply @ guard made of 
electronic components. But like its predecessor, it too is alible. 


Every now and then, « new technology emerges which finds its way 
imo the security industry. For example, the Passive Inlra-Red alarm 
‘stem commonly in use today was a by-product of the research on 
hheat-sccking miles conducted by the military. But just as technology 
‘marches on towards the good of mankind, o too docs it march for 
the resourceful erook, One can be certain that the state-of-the-art 
flarm system that is installed today can be bypassed tomorow, for 
‘criminal technology is constanly on the heels of security technology. 
From the frst “unpickable” lack ever picked, tothe “fool-proot” bio- 
mechanical systems being compromised today, the evidence is 
‘Overwhelming that “absolote security" exists in theory only. 

“We shouldn't discount the value of burglar alarms, however, for 
they do eam their keep, They often catch the impulse thie, the crow 
bar-wielding amateur who risks jail for a VCR or television while 
ignoring the original Reno on tho wall. They aso deter the advanced 
amateur, who, realizing an alarm impedes his progress, opis to try 
Somewhere ese where no alarm has been installed. And frankly, they 
increase the chance that & professional burglar will be apprehended, 
but for im, this isa calculated risk. He knowingly accepts this risk, 
just ac an astronaut accepts the inherent rik that aocompanies space 
travel. However, unlike the unlucky astronaut who pays for his 
‘mistakes with his life, the professional thief knows that even if he is 
‘aught he will serve, according to national crime statistics, an average 
‘semience of only one year and nine months. 

‘The actual number of professional burglars is probably very low, 
and unless you own something of extreme value itis unlikely that you 
Will become the target of & professional. Therefore, a professionally 
installed burglar alarm system will probably be more than enough for 
Your security needs. If, however, you have valuable possessions that 
Take you a candidate foe 3 profesional burglary, you should re- 
‘member this one axiom: co system will stop an intelligent and 
‘dtermincd burglar i he wants your pessessions badly enough. 

T have worked in the security industry for years, and I've seen most 
of the slarm components and systems in use today. I've also dis- 


covered ways to bypass many of them, Some methods are admittedly 
crude, hut others are quite erafly. I have not attempted to include 
every techniquo of bypassing alarms in this book, because new tech- 
niques are constantly being discovered, and it would be quite im- 
possible to explore every possibilty. I have, however, incuded the 
‘most common ways that burglars defeat our attempis to protect our 
‘homes and business 


In closing the introduction, I would like to remind the reader of a 
fact that at fist glance seems paradoxical. That i, as burglar alarms 
‘become more and more sophisticated and complicated, the less and 
less secure we actually become. The reason is because we begin to put 
oo much faith in them, and soon we are convinced that our homes 
‘and husineses are burglar-proof. We tend to subconsciously instil the 
system with the ability to catch burglar, and we automatically assume 
thatthe systom will compensate for our laxity. As a result, our entire 
security is placed in the hands (or chips) ofa machine, and machines 
fare much more susceptible to compromise than are humans. As you 
‘will see, a magnetic switch does not "know" when a door or window 
4s opened, it merely detecs the absence of its companion magnet. A 
Passive Infra-Red Detecor does not “know” when an intruder enters 
fa proecced room, for it simply detects the changes of temperature 
‘within the room. Therefore, any situation that is necesary can be 
‘manofactured, and the component can he made to “think” that all 
well, 

‘An alarm is a very useful tool that every homeowner, rich or 
middl-come, should own, It will protect you and your valuables 
from all but the most deteriined thie An alarm system allows for 
‘an incredible peace of mind, and it is an asset when selling a home. 
However, a burglar alarm wil not provide an impenetrable barrier 
‘bchind which you und your family can hie, as this book wil prove, 


PARTI 


Burglar Alarm Systems 
nnn 


Part [isan introduction to the various types of alarms in use today. 
Inthe first chapter, hard-wired protective circuits, the most common, 
are discussed. These are the circuits that guard a building's pecimeter. 
‘Therefore, they are used primarily on doors and windows, The most 
‘common member of ths family isthe ubiquitous magnetic switch, the 
litle set of white rectangular boxes seen above the doors of most 
businesses, The second chupter deals wit the second line of defense, 
the urea sensor. These rsa monitor a specific area rather than & 
specific point of entry. These are often called motion detectors, since 
anyone moving about a guarded room will be detecied, The manner 
in which these sensors achieve this goal varies between components, 
‘The third chapter offers some general notes and observations on alarm 
bypassing before the examination of specific components begins. 
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Protective Circuits 
nnn 


‘The Protective Circuit system isthe most common alam apparatus 
in use today. Therefore itis imperative that you flly understand the 
principles invalved. The premise ofthe protective circuit is that if 
sed ciroit suddenly becomes open, o if an open switch suddenly 
becomes closed, an alm will sound, Look at Fig 1-1 (see page 8). 
‘The electric cureat is travelling troughout the entre circuit at near 
lightspeed, from the tateries through the wire, tothe switch, tothe 
control panel, and to the batteries again. This is known asa protective 
circuit The current will ravel throughout the circuit as long as there 
are no interruptions. But let's say the switch yets pulled apart. See Fig. 
1-2 (page 8), Now, the contol panels electronics tll i thatthe circuit 
‘s no longer intact, and a relay sends power to the bell which makes 
‘tring, thus announcing an intrasion. This method of monitoring is 
known as hardwiring because all components of the alarm sre 
connected by electrical wire, as opposed to wireless alarms that 
lransmit theit signals to the control panel, (These are discussed in 
(Chapter 2.) Basically all burdwice systems contain magnetic switches 
‘on doors and windows, a control panel to which they are connected, 
[batteries for power, and a loud bell or siren, For the sake of simplicity, 
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‘Tye shown the circuit below with only one switch, However, most 
alarms have several, sometimes dozeas, of different switches to cover 
all posible points of entry. 


Flow of Current 


A protective circu harm nthe closed poston 
Annuneiator 


igure 12 
‘De arm is riggered when the sic i pened 


Prieave Crus 9 


In Figure 1-3, you cam se am alam system containing six diferet, 
switees. In an average home, we could dedicate two ofthese to our 
front and back doors, and the other four to fislloor windows. A 
violation on one ofthese six points of entry would trigger an alarm 
signal, Eleercity i curious thing, however. Note the flow of current 
in Figuee 1-3, The current must flow throughout the enie series of 
‘wits before it returns tothe bateres and contr box. Ifa clever 
burglar were to place a “jumper wire” across the cieuit (sce Fig, 1= 
4 on page 10), the circu would remain intact, and the panel box 
‘would be none the wiser. The thief could then'violae switch after 
switch without setting off an alarm because electricity always follows 
the shortest path to complete the circuit, when given a choice. 


Closed Switches 


fo dy, 


Figure 13 
A protective coca alarm with atch for 
‘ach proected point of en. 


So it would seem that alla thief must dois locate the wires to and 
from the circuit, and jumper them to bypass the entre sytem. While 
the theory is true enough, itis a bit more difficult in practice. 
Jumpering i sll fuely common when bypassing basic components 
land the cheap do-it-yourself burglar alarm kits, but becomes much 
‘more difficult when the thief encounters profesionally installed 


10. TECHNIQUES OF MURGLAR ALARM BYPASSING 


systems. Wires ae usually hidden under floors and in walls, and often. 
phony wires, that do absolutely nothing, are combined withthe real 
bes to throw a would-be burglar off track. Also, the batteries are 
‘usualy strategically placed somewhere within the circuit (ther than 
the control panel), so that even if the correct wires are found, an 
attempt ata jumper near the control bex would fil, because the lack 
‘of power will not complete a circuit. Irthu’s not enough wo dissuade 
fan intrude, alaem manufactures, in their constant state of paranoia, 
‘have installed in many high quality panes, an end-oftheline resistor. 
‘This measures the constant specific resistance in the circuit. Many 
‘change inthis resstance is apparent, due to jumpering, for example, 
fan alarm will still sound, One way burglars get around this 
fnconveniones ist place on the jumper wire itself a potentiometer or 
variable resistor. After the resistance ofthe ercuitis registered on a 
‘nultimeter, or an ohmmeter, the jumpers potentiometer would then, 
be set 10 that resistance, and the “Jumper-er” hopes for the best 
However, the end-oftheline restr is sometimes so sensitive, that 
even the smallest change will trigger an alarm. So obviously, this 
method would work only on an end-of-the-line resistor whose 
tolerance is rather lenient. 


Open Switches 


Figure 14 
A jumper wire defeats he alarm by keping the let clase. 


Protcive Creat V1 


Jampering isa very common method of burglar alarm bypassing, 
‘andi the method of choice forthe semi-sophisicate. However, it only 
works on a totally hardwired sysem, and is very unreliable due 10 
some of the modern safeguards. Sometimes before reaching a suitable 
Jumpering point, one must violate a switch in the proves, thus 
‘efeating his own purpose. But there are many mare effective methods 
of bypassing this system, as you will seein later chapters, 
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Area Sensors 
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‘The other type of alarm system that we'll cover is known 
collectively as “Area Sensors.” Unlike protective circuits, that cover 
‘only specific points of entry, the area sensor, oF motion detector as it 
is sometimes called, is relied upon to monizar large rooms or even 
“whole buildings. This type of system erect invisible barriers that must 
‘be penetrated in order (o enter or move about the aren. These barriers 
sare no easily defeated, and are sometimes difficult to detect. 


If Mr. Wilson owned a large retail store, he could probably keep 
‘most criminals out with electrified fences, bars on the doors and 
windows, and several Dobermans inthe parking lot. But fa thiet bid 
himself in the store during business hous, he could pif at his leisure 
after business hours. Mr. Thief would not violate any perimeter 
alarms, get electrocuted, nor get ttn (unt he lef, that is). However, 
With the advent of ares sensing devices the thief that tried this tice 
atthe local K-Mart would have to be prety sneaky, Ihe makes & 
noise, has a body temperature greater thin sity degres, has con- 
ductive skin, or is made of matter, he will more then likely set off an 
alarm. 
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All this is very disheartening for Mr. Thief, but very good for Mr. 
Wilson, the store cwmer For now he can install an areasensor sys 
that is more reliable than the Dabermans and electric fences at a 
fraction ofthe cost. 


‘Sometimes these detectors transmit their signal to centralized con- 
‘rol pane within the home or busines, and can be used in conjunction, 
‘witha hardwired, protective-cienit system. Many systems allow you 
to ditetly incorporate the motion detectors into the line ofthe circuit, 
50 that when the sensor “senses” something, it opens (or closes, de- 
pending onthe sytem) a switch, just as a door contact would. 

The list of obvious advantages of this system is enormous. One 
‘could monitor a room containing sensitive documents, or overlap 
‘many of them to caver several acres, Thus, the primary benefit ofthis 
{generation of security system i the relatively inexpensive cost involved 
‘m monitoring large surface areas. Aithough they are impractical for 

ding single objects, such ws a painting, they are sometimes wsed 
inside stfes and vaults just in case the other methods of detection and 
eizrrenes have failed, 

ecause ofthe nature ofthese systems, motion detectors aan, of 
course, be used where motion frequently occurs. Dog and cat owners 


‘who Keop their pets indoors are generally excluded from using area 


false alarm isthe primary disadvantage ofthe area sensor system. A 
hheat-uct may blow on a heat detector, wind may set off a sonic 
alarm, a fre engive's sien may set off 4 preamplifier, x dog in the 
parking lot may cause a microwave system wo go into an alarm 
Condition, and countless other harmless things can happen to 
‘compromise the reliability of area sensors. [is beter, I suppase, for 
these alurm sysiems i be over sensitive rather than under-sensiive, 
‘but herein ie the opportunity forthe imaginative burglar. 

‘There are six types of area sensors that we will discuss in depth in 
Parts IL and IIL. These are the pasive Infra-Red system, the ultrasonic 
Unit, the microwave system, electnic eyes, proximity sensors, and 
preamplified microphones. Explicit instructions willbe given in later 
‘hapets on how burglars detect and defeat each of them, 
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Random Thoughts 
On Alarm Bypassing 


‘Alarm bypassing i an art form that i over # century old. Shortly 
after Alexander Pope patented his electromagnetic codtact alarm in 
1853, thioves leaned that they could get around this inconvenience 
by simply cutting the wires. And since 1853, members of both sides 
of the law have been running neck und neck in their struggle 10 con- 
quer the other. Amazingly, after nearly 140 years, the most common 
perimeter alarm in existence today is still the Pope electromagnetic 
‘witch, although slightly modified. The ony real advance has been the 
advent of interior alms, or area sensors, and they have beewintro- 
duce in just te last dee decades. 

‘The chief drawback of any alarm system ists presumption that the 
‘burglar wil enter in a conventional manner. That is the owner of a 
petimeter alarm system believes that since he has guarded the wia- 
‘dows and doors an entry is impossible without the perimeter alarm 
‘knowing about it, However, an enterprising thief can enter a howse 
‘anywhere by making his own door with a sledgehammer and chain 
‘aw. Walls are ceranly psychological deterrents to most, but a pro- 
fessional knows that between be and your home les only smashable 
bricks and cuttable wood. Granted, you probably won't see the old 


sledgehammer/chainsaw ploy used in downtown Chicag, But is 
‘quite possible hat it happens everyday in Suburbia, USA. 


While the sledgehammer and chainsaw have their uses, there are 
many more tools that the professional burglar possesses. He may have 
fi lockpick se, doocjamb spreader, glaziers’ and wall climbing equip- 
then, miniatore transmitters, Infra-Red goggles, and bolt cutters, just 
to name a few ofthe big-ticket items, He certainly has many smaller 
tools that be can use on certain occasions, such as glass cutters, Ult- 
Violet marking chemicals, handcuff keys, and pry bars, Using these 
tools and others, he always tikes the path of least resistance t0 a¢- 
‘omplsh his objective, Which brings us to the most important tool 
inthe burglar’ arsenal: planning 


‘Planning is only possible ler careful and deiberate seudy of the 
propesed target. OF cours, a burglar never knows what be wil come 
cron, but it helps when he has eliminated several posses, For 
‘example ifthe burglar is certain dhat he can enter throogh the door- 
way, he will leave the unnecessary equipment, such as glazicrs 
fxquipaict dnd chainsaw, at home. With proper reconnaissance and 
planning, tis aot even neesary fora burwiar to worry about alarms, 
fa thet was certain there was a valuable painting in someone's 
second floor bedroom, could he break through a window, run up- 
Stais, grab the pointing, and leave before the police arrived? Most 
assuredly he could 


‘The other elements of alurm bypassing, besides planning, are 
dcction and execution, Detection is important because one cannot 
bypass an alarm if he does not know itis there, Detection is most 
tl safly and effectively accomplished prior to the execution, This 
{& of course, oot always posible, so in Parts I and I, TW show on 
the spot methods of deteetion that thieves often employ. But some- 
timer under the guise of cuslomer, insurance salesman, poteatial 
Client te a burglar may “case” a home or business fr the upeoming 
brary. Also, there are methods of “preventive hypas”to counteract 
invisible, but possible alarms, but they are usally ime consoming and 
‘burglar racly depend on them, Examples ofthis are cutting hoes ia 
doors to avoid having to open them, or “walking &Ughrope" 10 avoid 
Stepping on & caret that may contin a presue seasiive ma, A pte- 
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fessional burgar maintsins the state of mind that anything can be a 
trap, and be always act accordingly. 

Aer planning and detection, comes execution, This is accomp- 
lished by knowing the pitfalls of the alarm component. Detailed 
instructions for thwarting these components are contained in Part I 
‘bt they are by no means complete, for new methods are always being 
‘created by resourceful burglars. Execution can mean geting around 
an alarm component, or it can mean shutting the ete alarm system 
own. Almost every day, a person “legitimately” tuas off his alarm 
system, This is done because he comes home from work, or because 
he is opening his sore for busines, and in either case he no longer 
‘eqs an alarm, But because thee systems can be leptimatly turned 
of they can ao be “legitimately” tumed off, as will he explained 
in Part 


PART O 


Local Alarm Bypassing 
anny 


{In Put I, we will examine each component ofa local alarm systems, 
and see the most common ways of deteting and defeating them. A 
local alarm system i one thet rings a bel, sounds a sien, or in some 
Way notifies everyone in the surrounding area that a burglary isin 
progress. A monitored alarm, which is discussed ia Part Ill, contins 
all the components of a local alarm system, except that it i silent to 
the burglar. Instead of bells wod siren, it secretly sends a signal to the 
police, alarm company, or guard agency, 

‘The advantage forthe burglar in bypassing local slarms is that he 
will now immedistely if he has made a mistake, forthe clanging of 
‘bel isthe giveaway. And, unlike x monitored alarm system, he needs 
caly to bypass the necessary components instead of the entte system. 
Furthermore, the local alarm offers as many or more avenues of 
circumvention as does the monitored sytem, a8 you will se, 
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Silencing The Annunciator 
WANNA AAA AAAAAAAAAAAAARARAARAARAARANY 


‘There are two basic pars to every local slarm system in use today: 
the sensing device that detects the intruder, and the anaunciator, If 
cither part is nullified, then so is the entre system. The ancuncisior 
‘of an alarm system is generally bell siren, buzzer, horn, or othe loud 
vive (see Figure 4-1), Iti meant to let everyone in the immediate 
Vicinity Know that « burglary isin progress. The problem is, most 
people simply ignore bells and sirens when they hear them on & busy 
sureet, Most homeowners, however, have tld their neighbors that & 
bell or siren: means troubie, and to call the police, If police happen 


Le} Oa GD 


Figure 41 
Alarm sytem anmanciators 
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to be inthe area when the alarm sounds, they usualy become ma- 
‘mentary confused, Thats boca in large subdivision itis dificul, 
10 pinpoint the crigin ofthe elanpor, de 1o eceang. 

The annuacisor i wsually on the outside ofthe howe or business, 
50 a5 rae the mot commotion, although oceasinally one is also 
laced indoors. 

‘Locating the annunciator i relatively easy. Is nearly always very 
high on the sides or back of the bows or busines. Ii ether surface 
‘mounied or semi‘lush mounted, and may even be encased in a 
protective housing (se Figure 4-2), This protective housing will have 
small isto allow the sound to escape, and is neatly alway proved 
‘gxinst tampering. Any atiempt on the part of the bugir to tamper 
‘With the door or wie, wll generally est in an slam condition. A 
‘00d annunciatoe will alo havea tlay and a tiny generator that will 
Power the bell f someone tiesto cutoff he electacty, The housing 
imay be key-locked, to allow for easy maintenance (see chapter 13 for 
lack information). AST pointe out eater, no components ofa focal 
slam need to be bypassed ifthe annuncatr can be properly disabled, 


igure 42 
Anuncios are sometimes encased in a potoctive housing. 


‘The first goal of the burglar is finding the annuncistor, If it not 
immediately visible, he may purposely set off an alarm so thst he may 
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ciscem from where the sound i emied. This i ako good op- 
petunity forthe thief to time the arsval of the police, uta safe 
Stance of eourse. Once the bel o seni found, the problem of 
feting toi arses A ladder, in rl areas, may sue, but carrying 
ladder to «strange house slighty conspicuous. Burglar prefer 10 
Simi the wall if possible, or cima rope Indder that tas been thrown 
mo and atachel wo ths roo by a grappling book. 

However the annunciator is reached, the next step isto attempt 1 
sisable it prior to the housebreaking. Burglrs often take the pre- 
‘auton of weasag earplos or headphones, such asthe kind hunters 
Sr shooters we. There & nothing quite as saling as holding onto 
‘ope while 120 decibels suddenly pour into your ers. By the way, 120 
4, which swell into the pai level quite common fr alarm sos, 
Prolonged expesore at this stentorfan level, will certainly cuuse pet 
ssaneat deafaess 

If the annuncator isan exposed bell, the clangor may be sipped 
cof with boltbiters, or removed wih a cutting tore, sal buzzer, 
Uke the fire alarms in schools and hospitals, i easily knocked off the 
wall with sledgehammer if is done quickly and focally. An ex- 
posed hora aa be filed with modeling cay and tumped tightly, to 
Szereace the audip output A siren may also be fille with lay, but 
‘bives have eared tha the eo sten, inside and ut must be filed 
completely, of sound wil escape through the sides. Many times, the 
sider and/or cheaper model will even have a simple on/off switch 
oo them. 

IF the annunciator is housed in a steel bor, itis easly silenced 
‘sithout removing the door. The housing often Contains smal sits or 
Tuvers, but fot smal hole can be made wih a portable di Into 
this hole, several cans of aerosol styrofoam, the kind used for 
svcaherproofing and insulting, are sprayed. When this dries and 
areng in mater of mints it creates nary sound proo barter 
thatthe annageiator cannot pencvate. Amateurs and novices, who 
have heard ofthis technique, use shaving cram or something of a 
similar consistency, Dut itis less effective than the fast-drying 
‘nelation foam. 

the larceny i tobe perpetrated ltr inthe wee, or perhaps the 
sext day, an even more feliable method may be wed. Instead ofthe 
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small hole, a larger one, ubout 1” in diameter, is bored int the top 
ofthe steel housing. Very dry eancrete, mage without gravel, is then 
introduced into the hole using a funnel ora cake decorator’ bog, until 
the enire housing is filled completely. Similarly, these is aliquid that 
pours like water, and harden like plass in a few minutes, aud is 
‘marketed under the wade name, Castlite®. Wax i also a posits, 
bata beat source is obviously required, There is w slight danger in 
sing these techniques, because Liquid containing water conductive. 
‘The introduction of concrete or any ther liquid into the annuncitor 
housing, may result in a closed switch, sounding the bello sten. It 
‘would be somewhat mufled, of course, but sound would be emitted, 
nevertholess. Another possibilty, although I've never seen or heard of 
i being done, is to actually build a muffler around the annunciator, 
‘ng fil it with a suitable sound-proofing material, 

none of the above idea are appealing, one may remove the bricks 
‘or sing surrounding the inexpensivo annunciator, and search for any 
wires, If they are all cut simultaneous, the annunciator shoulda't 
lnnunciate, proved thatthe wires that are cut ae the real ons, 

When sound wavels from an object, it decreases in intensity ex= 
Ponentially. A 120 dB annunciator s perceived to be only 95 dB at 
‘8 dstance of ten fet, and st one hundred feet, the decibels wil have 
‘ropped tremendously, Considering that the nearest house or business 
will be about twenty feet away, the alarm signal will appear sig- 
nificantly fainter than it would the source. Ifthe burglar had an 
accomplice operating an air-powered jackhammer (that averages 97 
«Bin front of the neighbors house, an alarm signal would probably 
20 unnoticed, If two accomplices were operating jackhammer the 
effect would be even more profound. Of course, they had better have 
prety good pretexis in case the neighbors wonder why in bell hey'te 
tearing up the sidewalk. OF course one may have three, four, oF five 
accomplices with jackhammers, but the potential payoff would have 
'o be prety large for anyone vo go to that much trouble 


‘Magnetic Conte Switches 25 


5 


Magnetic Contact Switches 
enn nahin nnn 


‘The magnetic switch, the mest common ofall hardwired compo- 
ens is found on doors and windows around the wodd. It consist 
‘ftw individual pice, the switch ise, and the companion magaet 
(sce Figure 5-1 on page 26). The switching mechanism i «spring 
loaded lever tat makes contact wi stationary metal arm when the 
companion magne is eat. Thus, the magnate switch isa normally 
closed circuit. When the magnet i pulled away (see Figure 5-1 on 
page 26), the lever s released from the stationary arm and the circuit 
' no longer complee. 8, the opening fu protected door ar window 
removes the magnet from the sic, and since the circuits no lger 
Complete, the alarm sounds Sine the cult ofa magnetic contact, 
Sich is normally closed, wires cannot be cut to defeat the sytem, 
for this us the same eo’ removing the companion magnet 
‘The magnetic switch offs: more opportunity fr jumpering dhan 
oes anyother individual component. Since the wires are often visible, 
fone needs ony to remove the insulation, and place sal wire acros. 
the cei to defeat apd bypass the switching mechanism (sce Figure 
552 om page 27). The main problem forthe thief the, is simply 
locating the wires, if they are not wise. Often they ae iden behind 
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tbusebourds or trimming, or are snaked through the studs behind the 
‘drywall. They may be uncovered from the outside, after the bricks and 
‘wallboard have been removed 


Closed Switch —FigureS-1 Open Switen 


A common magnetic switch On the lef he circu is cased 
‘When the magnet ts removed (right) the cicutt opens and 
riggers the alarm, 


Usually, one has to already be inside to get at the wires, however 
there area few tricks that burglars employ. A hole may be dled or 
‘aut in the door or window, and 2 fibersoope may be inserted. A 
fiberscope has a viewer and along flexible tube that allows one to se 
around comers and into small places. They are used primarily by 
doctor and elscricans, but they also mako an efocve instrument. 
for bypassing magnetic switches. If, after inserting the flberscope, there 
are visible wires on the inside, another larger hole can be made 
through which an arm wil pass’ By watching the procedare through 
the fiberscope, the wires ar easily bared and jumpered. The door can 
then be opened without creating an alarm condition, 
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Figure 52 


The magne sich is mnerable fo jarpering. The jonper wire 
maumtin closed iret 


OF coms, if ones going to cut a sal ol, and then a larger one, 
a person could just cut a really huge hole in the door and crawl 
through i. But this is Bt more dificult with windows, because they 
are sometimes to small o craw through, and because they may also 
te uilzing window fog (ee next chapter). Bu fen, a hole can 
sillbe dled inthe window, and jumpering accomplished ihe wires 
fre vile, One way to make the wires vibe o unsere the switch 
land give it litle pol. The wites will probably be stapled and may 
‘be dificult to pull, but there is a small chance thatthe wires were jus 
stl in betwee the studs, This done carly so tho switch is 
‘not removed too fu from the magnet, One may ako cut the drywall 
located behind the switch in/an atempe to lcate the wires. Also, if 
posible, the magnet may be unscrewed from the window itself and 
{aped tothe switch. The window could then be fely opened. 
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Since the visibility of ordinary magnetic switches aids in theie 
defeat, some companics ate manufacturing many varieties of recesed 
switches (see Figure 5-3 below). These switches generally go 
unnoticed, and can be very dangerous to the burglar who, after not 
seeing the old magnetic contacts, believes thatthe door is unprotected. 
‘The magnet is usually placed in the door, and the switch is usually 
reoewsed in the door frame. If one has access 10 the door during 
“normal hours," one may spy the telltale circle in the bottom of the 
upper door frame (see Figure 5-4 on page 29). Even if they can be 
seen, they are very difficult to jumper because one must remove, ot 
cut through, the drywall and trim, to reach the wires. Recessed 
‘iagnetic switches cannot be seen with a fberscope citer, 30 that 
brings us to our next topic, the detection of magnetic switches. 


‘Switch 
© Magnet 
Figure 53 
‘A modern recessed magna ch, 


AA high-quality liguid filled compass will react wildly when in the 
presence of a magnet. One placed near 2 door or window will 
‘certainly tell the wer if magnetic switch fs nearby. After a compass 
‘has determined that a magnetic switch is indeed there, a gaussmeter 
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cam be used to determine the exact magnetic strength, A magnet with 
the same strength and Geld is sometimes used to quickly replace the 
‘old magnet, making the switch none the wiser. A gaussmete is very 
expensive, and very few systems outside the realm of high-security 
tlie bias sensors that sense diferent magnetic fields, So a gadget 
available through many scientific supplies, called a Magnapeob, will 
Work in mos situations 1 pinpoint the magnetic switch. 


Magnet Sak 
ei 


igure $-4 
A recessed switch implanied indoor and fame, Ti switch is 
very diffi jumper. 


In any of the cheaper versions that do not monitor the specific 
magnetic strength, but just need any magnet 10 hold the switch 
‘together, a super siroug magnet will suffice. Burglars often use 
‘Neodymium-Iroa-Boron composite, which makes for avery efficient 
‘magnet; NIB magnet the sine ofa quarter as a iting power of about 
ten pounds Tt soften affixed to a coat hanger and manipulated inside 
‘he premises, near the switch, The magnet is carefully maintained in 
such a way that it closely resembles the position of the old magnet, 
‘The door or window will then probably open without complications. 
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Iw burglar doesn’t know, or care to use, any ofthe above techniques, 
eo on pc mip ed ead 
thro 
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Window Foiling 


I aanaen anna ananananaannanannaanannanae’ 


Inthe ast chapter, we discussed the primary lie of residential win- 
ow defense, the magnetic switch, but inthis chapter, the most com- 
‘mon window monitor for commercial applications will be covered. 
‘Window foiling is probably the alarm component with which laymen 
are most familiar. It graces the windows of nearly every liquor sire, 
grocery, and sevice station in America, and rightfully s, for itis very 
ificlt to bypass successfully, Inthe past, the unsighlinss of window 
foil effectively kept it from widespread residential use, however, 
‘modem homeowners are becoming increasingly concerned with so- 
curity, even atthe expense of beauty. 

‘When a window is to be monitored by foil, the foil is stretched 
around the perimeter of the window (se Figure 6-1 on page 32), Two 
“take-off blocks," of terminals, are placed atthe end ofthe foiling and 
connected to the rest ofthe ereut, The foi, now part of « normally 
closed creat iss fine that if a break ocurs in the glass, the foil will 
fear, opening the circuit. 

Foiling is often coupled with magnetic switches, and thee lies the 
bie problem forthe burglar. If be cannot raise or bresk the window, 
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‘how can he enter? The easiest way of bypassing this component isto 
simply avoid it and try emering somewhere els, but there are few 
‘posibiltes forthe determined thie. There are thee primary methods 
hat burglars empioy when defeating window fol. Amateurs, on the 
‘other hand, who don’t fully understand the principles of a window foil 
Circuit, try some erude methods that are usually unsucczsful, They 
sometimes smash the window, and hope that the fil won't break as 
‘well. The odds ofthis happening are astronomical since the fils very 
Uighly stretched, and breaks atthe lightest provocation. I've even had. 
1 repair fll that had torn during a simple wind gust. Amateurs even, 
‘ry cutting the entire window ou, since it allows them to get a and 
jumper the terminals, But any slight movement inthe wrong direction 
‘ses off an alarm (while they'e holding 2 20 pound sheet of las). 


Foil 


Figure 6-1 
A ribbon of thin fol is stretched around the perimeter of a 
‘indo: Any tear nthe foil riers the clam. 


‘One method that will work, provided the window is large enough 
(the burpar is small enough), is the cutting of a crawl space in the 
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window tht is far enough from the fil that it remains undisturbed. 
The entice window is covered with u strong duct tape, leaving blank 
ne hole intended to be cut. The hole, preferably squate is scribed with 
«high-quality diamond tipped glass cuter. The eulter is then used 10 
ce and retrace the scribed fines unt the plas gets quite tha, When 
be lines have been determined to be deep enough, a thin layer of 
“odelling clay is applied to the glass area that i to be removed, Then, 
» thick, wet newspaper (10 shield noise) is laid over the potential hale 
snd tapped sharply around the sribed lines. With any luck, the glass 
sil break only where the lines were cut, The duct tape serves as a 
oeieabsorber, and also keeps the plas from shattering and falling 
the floor if a mistake is made. The layer of clay serves 10 deaden 
be suri ofthe glass it hits the loo inside 
Another method often used is the jumpesing of the 1wo fil 
crminals, If they are visible, «small oe is drilled into the glass near 
sm, using a carbide bit. A wie i then lal cross the terminals to 
umpletely bypass the whole foiing system, The wite is, of course, 
stened securely o the terminals to avoid ving it fal ff during any 
ort of the mission, A more reliable method involves baring the wires 
‘ing from each terminal and jumpering them. This is obviously 
<ul, since many times the wires are not visible, and since one is 
-mpting it through a small hole. At amy rate, if jumpering is sxc- 
=sfully ccomplised, the entire pane of glass can be shatersdwith- 
st setting off an alarm, 
‘The third method is utilized when one bas prior soosss to the 
mises, When n0 one is watching, a razor blade is used to sure 


‘wen-on) his sysem, he discovers tat the zone covering the windows 
sil not arm properly (zones will be covered in detail in later 
piers) After a quick survey ofall the window foi, he figures that 
system must be malfunctioning, and decides to arm every zone 
‘cept the windows, and to calla repairman frst vhing in the morning, 
this Occurs, the window containing the cut foil will remain 
guarded all night. 1 is conceivable that the owner could call 
:pairman that instant, but the intelligent burglar wil be keeping his 
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ye out for that If the owmer finds the tar, there is really not much 
hhe can do without the proper tools and supplies. From the burpl’s 
‘vantage point, he should be able to observe aay repairs the owner is 
‘making on a particular window, and aet accordingly 

Finally, i is also possible thatthe wires going from the terminals 
to the rest of the circuit, may be jumpered (see Figure 6-2 below). 
‘They may be uncovered by removing the bricks or sing, and cutting 
through the wall board. Ifthe wires are revealed and jumpered, the 
entire window may be smashed without sounding an alarm. It 
important to remember, however, thatthe jumper wire must have 
shorter overall length than that of the orginal cuit. 


Figure 6.2 
Window fot can be defied by uncovering ad fumperng the 
circu woes 


No, window foiling is not particulary easy 10 bypass, but re- 
member, i is mot necessary that the burglar ener through window 
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either, They Know that a window that has just been cut is not a 
pleasant thing to craw through, and it’s not a temibly wise place to 
be seem erawling. lange hole cut ina window just hus “burglary” 
‘written all over i for any chance passer-by. There is also a good 
chance thatthe premises are protseted by other components (namely 
preamplifiers) tat wil pick up on any window activity. 
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Ultrasonic Alarm Detectors 
AANA AAAAAAAAAAAAAAN AANA 


‘We now move into the stady ofthe next generation of alarms, the 
ea sensors. The first area sensor componett we wil examine isthe 
ultrasonic alarm. The ultrasonic system consists ofa transmitter, which 
‘mits frequency that lies above the human threshold of hearing, and 
4 receiver, that monitors the incoming feequency. The entire system 
's generally sefcontained in one unit, although octasionally one 
‘eansmuter is used with several reexvers, 

‘The sound waves that emanate from the transmitter follow an 
clliptical resembling an elongated oval) pater and ultimately return 
othe receiver. If those waves are somehow altered during their 
clliptical journey, the reciver wil know it, and the alarm wil sound. 
Therefore the theory is that if a burplar enters @ guarded area, the 
ultrasonic frequency will be altered by his presence, thus alerting the 
receiver to an intrusion. The ultrasonic system is very effective, and 
the range is generally about 40-50 fet. 

Although ultrasonic, the frequency that these systems transmit is 
low, about 20-45 kHz (kiloHertz, or thousand eyeles per second). 
Standard AM radio is between 535 und 160$ iH, This makes 
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detection somewhat dificult, but not impossible. The elimination of 
possible ultrasound users is even easier. People who own pets or who 
live near a railroad or other source of loud noise are excluded from 
‘ultrasonic usage, Pts cause too many false larme and the ultrasound 
‘may be very irritating to them, since they have & higher sonic 
perception range. Loud noises eente sound waves that interfere with, 
the ultrasonic waves, and create false alarms, Also ultrasound cannot 
‘be employed where there isa great deal of movement. Blowing drapes, 
{orced-ir heating, falling boxes, Cuckoo clock, etc are all causes for 
false alarms, and generally exclude their owners from the wltrasonic 
club, 

‘There are several methods of ultrasonic detsction. Mult-range bug 
detectors will reveal the presence of these alarms, Or, with the 
assistance of an electronics engineer, one could make « device that 
responds to frequencies between 25 and 45 kllz. Another way isto 
purchase a multiband radio or scanner that contains these low 
frequencies, If the frequencies are scanned slowly, between the 
aforementioned parameters, an inordinate amount of static and 
interference should oocur when the cocect frequency is discovered. 
Another way, albeit unorthodox, is to take & mouse or hamster neat 
the suspected ultrasonic source, and observe their reactions. Small 
rodents detest ultrasound, and they usually make every effort to avoid 
it, (Ultrasound is what is used in those electronic pest-ridders.) 
Furthermore, there are converters avilable that bring the inaudible 
frequencies down to the human’s audio perception level. In the 
[presence of ultrasound, these converters will produce a high-pitched 
‘hum. Even if prior detection is impossible, professional burps bave 
‘observed that transmitters are almost always placed in the comer of 
‘protected room. 

(Once the sensor i detected and located, what next? How does one 
peneirato an invisible and inaudible sound barrier, in order w dis 
4, without subjecting ones to immediate detection? Ifa homeowner 
‘caused his ultrasonic detector to blate throughout the neighborhood, 
‘after coming, home from work every day, he would soon get many 
‘complains from his neighbors, That is why most vltrsonic alarms, 
‘and mast other alarms as well, haye delay switches: They allow the 
person to enter the house, and disrm the system before the alarm woos 
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off, 1 alo allows him to arm it, and then eave before it begins 
‘monitoring, This type ually bas simple on/off switch om the back, 
and if burglar reaches it before the tty seconds expze, the sytem 
Soest know be ia’ the homeowner. Ths type usally a desktop 
‘model and usually hasan elecrical out atached wo itso tha a lnp 
may be made to come on to scare the borglr. (I've also seen a tape 
recorder paged into it which has a recorded message that aye "Wal 
the ell was that!” when the guarded area is violate.) 


Because of their simple on/oT switch, these are obviously the 
easiest to bypass, but there ate some that ar abit more dificult. They 
are offen disguised as u wall outlet, HiFi speaker, book, or are more 
conspicuously located on the wall (see Figure 7-1 above). They too 
hhave delay mechanisms, but only the book and speaker types have 
simple on/off switches, The wall ad outlet varieties are usually part 
‘of larger, ceatrlined system, and can only be shut of atthe control 
panel. The problem of the book/speaker type then, is simply 
recognition. The speaker type will be recognized because Hi-Fi’ have 
fn even number of speakers and third or fith speaker should stand 
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‘out Ako, ia speaker is sunding alone, with no accompanying stereo, 
it is deud giveaway for thieves. The book type is more dificult 9 
locate when many books are in the room, but it wil be rather thick 
volume with either two twin circles or squares (sassmitter and re- 
ceiver) on the binding. The name will also be of a peneric nature, 
ruber than “brand name” publisher. 

‘Therefore, the burla’s primary difficulty lies in defeating the outlet 
and wall-mounted types, There are several techniques that, when used 
together, enhance the probability of success tremendously. [Fone has 
nor acces tothe protected area while the system is disarmed, socoess 
in defeating this system is almost guaranteed. A burglar may lower the 
sensitivity to zero, fil the entre apparatus with aerosol styrofoam, o, 
ifn one is around, cut through the dryvall,locute, bare, and jumper 
any wires that may be found. IF one does nat have price acces, he 
sill has afew options at his disposal 


While the owner is away, one may rap the windows violealy 10 
create an alarm, and if this is done daly, the neighbors wil eventually 
fell him that they ure tired of hearing his alarm blast through the 
neighborhood every day. Believing his sensitivity i too high, he il 
tsually lower it to compensate forthe “mysterious” outside noises, 
‘fier this s done, the burglar enters wearing a heavy oversized coat, 
‘or even a rug, if posible. The more sound-absorbing material a ba 
lar can don, the safer hel be. The lage coat oF rug absorbs rather 
than alters the sound frequencies, and the system's efficiency is com- 
‘promised considerably. Ifthe walls are covered with rugs, draperies, 
tapestries, the effect is multiplied. Bu absorbing some ofthe sound 
'S mot enough, forthe burglar must move super-slow. Ifthe burglar 
‘must traverse a monitored area of twenty fet, he may spend atleast 
‘en minutes crossing i. The object here isto move so slowly that the 
frequency remains undisurbed by the burglar’s motion, Some ul- 
‘rasonie units are hidden behind wallpaper or plaster, but this cus 
theie effectiveness by atleast 25%. IF the ultrasound unis re installed 
in that manner, they become so unresponsive, the above: methods 
‘become al the more efficacious, 

‘There is one last remote, yet viable, technique for circumventing 
‘this type of component. IFone discovers the exact operating frequency 
‘of the unit, he could, theosetially at least get an uliasonic transducer 
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ofthe same frequency, and stick i infront of the receiving unit. The 
‘whole monitored area could be violated beeause the receiver would 
constantly be receiving what the transmitter was tansmiting. Pv 
never seen this done before, but itis a possiblity. 


Photoelectric Alarms 
AAA AAA AAA, 


‘The photoelectric alarm, or “electric eye,” i frly common alarm 
component today, and like the ultrasonic unt, it consists of a 
‘wansmitter and receiver. The transmitter sends light to the receiver, 
and ifthe beam is interrupted momentarily, the receiver recognizes it 
and sounds the alarm. The electric eye principle originated, as did 
‘many other security products, from the military. During Werld War 
1 the army used electric eyes on rockets to puide them to airplanes. 
‘This was soon abandoned, since they were also attracted to seagulls, 
be swarms, or anything else that blocked their view ofthe sun. 

‘The photoelectric unit may be a transmitter and receiver that op- 
‘pose each other (ee Figure 8-1 on page 44) ot the transmitter and 
‘eeriver may be housed in one unit, while uliting a reflector atthe 
other end of the room (See Figure 8-2 an page 44). The old type of 
‘uni, whic is sil used in some places, uss ordinary white light. These 
‘are simply defeated by shining a flashlight into the receiver, s0 that 
‘confederate may puss right through the beam. This type is easily 
detected, expecially at night, because the light is plainly visible. 


444 TECHNIQUES OF BURGLAR ALARM BYPASSING 


Photeleerie Alms 4S 


Even though the newer models use invisible light, they ate still 
terribly easy to bypass. They are placed in front of doors, windows, 
or in Tong hallways, in an attempt to catch passerbys, The inherent 
sdsadvantage of photoelectric sensors is that they are easly seen. 
Although sometimes disguised as wall receptacles, they are slmest 
always n plain view, and ths fact alone aids in circumvention, 

‘The modem electric eyes use a beam of Ulra-Violt or Infta-Red 
light. Anyone can buy, from a science supply company, fies that 
allow them to view UV or IR light. The invisible light i» now visible, 
‘and may be easly avoided. Trying to shine a beam of UV or IR light 
into the receiver may work, but the higher-tech models use a pulsed- 
beam. The receiver wil be programmed to the transmit’ frequency, 
and any deviation will result in an alarm. If one has access 10 the 
premises beforehand, he can kick and break the receiver, causing it 
‘0 malfunction, and causing the owner to shunt that zone before 
‘arming the sytém, 

‘There may be caces where the component uses laser light, instead 
of Ultra-Violet or Infra-Red. Ths is easly stepped over, ducked under, 
or otherwise avoided, provided there is not an entire network of lasers 
‘hat form an impassable gr. This would only be ulized in a very 
high-security situation, but since it does cccur, burglars have dis 
covered at least two ways in which it may be surmounted. First, 2 
mirror system could be designed thet provides a doorway for the 
burglar, The mirrors mast be precisely 45°, and since the apparatus 
'S constructed on the spot, careful planning must go into its design, 
‘The viability of the next technique depends greatly on the cir- 
‘cumstances involved, If there is.a hiding place near the aser-grid, one 
‘can walk right through the gr and then hide, The burglar then re 
leases bird that be has brought with hin, Aficr the alarm sounds, 
and a guard investigates, he will see the bird near the alarm, He may 
‘wonder how it got there, but he will automatically assume that it was 
the bird that passed through the beams. It should be obvious to the 
eader that this technique may have applications in other areas of 
alarm bypassing as well. The laser grid system will certainly not be 
‘encountered very often, so a burglar with UV and IR fiers may be 
fairly certain that he is safe from detection by photoelectric alarms. 
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If the burglar cannot obtain a filter t view Ulta-Violet light, an 
inexpensive but accurate UV detector is currently available where 
sunbathing products are sold. Ins intended purpose is 0 wasn the 
sunbather when an inordinate amount of UV energy is detected. 

The Infra-Red mentioned shove is of the active variety, which 
‘means it emits Infa-Red light, and isnot to be confused with passive 
Infra-Red, which isthe subject ofthe next chapter. 


Fecelver 


Transmitter. 


Figure 83 
An outdoor photoelectric alarm sistem. 


‘Some companies also use photoelectric sensors out of doors. These 
vices (see Figure 8-3 above) ate placed far apart and are wsed to 
‘moaitor the area betwsen them. They ure detacted and bypassed in 
the sme manner as described above, but they also ve an automatic 
shut-off mechanism that may be of interest. At daw, dusk, or during 
an extremely foggy morning, these devices shut themselves of to avoid 
possible false alarms. This azo allows am observant burglar to slip past 
them at dawn or dusk, orto manufacture “fog” if necessary 
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Passive Infra-Red Alarms 
aaa anannanaananaananaaaamamanaanaannel 


Passive Infra-Red alarms, or PER's are so called because they do 
not emit Infra-Red energy, but merely detot changes in it, A PIR 
proes its monitoring area, and if any changes are detected i. Efra- 
Red energy (heat), it sounds an alarm. A PIR records the ambie 
room temperature soit will notice any sudden change, such as that 
produced by a human body. Slow temperature changes, such as 
‘thermostatically controlled heating systems, will not interfere with the 
PIR's duties, The PIR is often called thermal detector, however such 
heat detectors are used primarily for fire prevention. The PIR is 
immediately recognizable (see Figure 9-1, page 48), due to its 
common design and dark-red lens. They are very common in 
‘museuans, banks, and other places where high-security is desired. 

‘The very fact that a PIR is pasive, disallows easy detection. The 
‘burglar must ely solely on his observations for the recognition of 
PIR system. Due to the nature of a PIR, they are usually placed in 
8 very conspicuous location, such asin the corer of a room, The bad 
news for the burplar is that PIR’s have vandal-proof germanium 
lenses, are tamper-proof, and cannot be jumpered reliably. Further- 
‘more, the range ofthe PIR can be 70 feet of more although a PIR's 
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probing patter usually only monitors an area of about 20 fet square 
(Gee Figure 9-2 on page 49), 


Figure 9-1 
A high-security, Posie Infrae alarm. The design is exsily 
‘reconnzable 


As cclabe as they ar, PIR, as you've probably gueved, are 
defeatable, Although they are generally undetectable, large-pet owners: 
are immetately eliminated fom thelist of posible PUR wes. With 
ther recent pecifnton into the resend market, burglars ave 
Jeared to atipte a PIR system. Some are sold otrineounts, 
although a great many are professionally installed, Therefore, one 
teams of deetion would be to se whether or wot the al com 
en's window deca was present In the movies, burglars would 
tounta transmiting TV eamers cm remote cone x, and die 
{tround inde the bung locking fr PR. But in eal if, he 
cnitence of ler cemponeats would certainly dsllow that. 

ease, 1a that PIR's detect rapid changes in emperaur. have 
valle, sibel sowty, dry opto «PIR, and have no se it of 
My movement wat so slow thatthe PIR adjusted tothe slight 
diferene in ambien temperate tht my body was ceting. Even 
ita PAR sytem is ona sent alarm (er cused in Pat TM), one 
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‘immediately knows whether or not be is detected. All modern PIR's 
‘havea tiny red LED (light-emitting diode) that lights when the burglar 
‘causes the internal switch to close. Although I have walked up to a 
PIR, it 00K me four or five times to get it righ, therefore just walking 
slowly is not enough. ea 


Ul Located tna comer @ PIR can have a range of 70 feet 
or mare although usual monitors an area of 20 fet suare 


‘The greater the distance between room temperature and the 
temperature ofthe source of violation, the more efficiently the PIR 
Will work. As the gap between room temperature and the temperature 
of the violator narrows, th effcieney of the PIR decreases respec- 
tively, Therefore, since our bodies maintain a constant temperature of 
98.67 « PIR in a room with a temperature around 10K will never 
‘otice you walking through the room. The burslar then wonders: how 
can [heat and maintain a room or building at near body temperature? 
‘One way i to get to the thermostat and turn it on full Bast. Another 
‘Way i fo, if possible, make a hole iato the room or building. and 
itroduce a large space-beaer. It should be a least 350,000 BTU's 50 
that it can produce the required heat I'it Blows directly into the path 
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of the PIR unit the alarm will sound. The heat must be raised 
aduly, or the ihe defeats is own purpose 

‘Mylar is a thin, metallic, plasticlike material that has s very 
‘interesting characteristic, When worn, it allows very little body heat 
to scape Tra suit, with a hood, as made ofthis materi, oly a 
Small amount of heat would reine from He burglar, and he chase 
Of detection would he lowered. 

If one raised the temperature of the room to 80°-100°, wore a suit 
cof Mylar, and walked very slowly, he would have a very good chance 
ff excaping detection. He may also py the same game described in 
‘Chapter 7,50 thatthe owner il reduce the sent. If prior aon 
canbe pned to a PURcproecied area, a layer of modeling clay can 
be spread over the PIR lens to profoundly reduce its sensitivity. The 
clay may have to be covered with a phony lens to prevent detection. 
‘Ak, if one pet to the PIR without sein it of, a piee of heavy 
‘ardbourd ca be ached to the font of the les. A PIR does nc. 
rete et hres dec above, low ork immediate 
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Microwave Systems 
AAA AAA AAA AAAAAANAAAAAANAAAANAY 


‘The Microwave alarm system is another transmitter/receiver 
motion detector, and is unquestionably the most dificult to suc 
cessfully bypass. The system emits a beam of vlt-high RF (Radio 
Frequency) energy, generally 10.525 GHz, and detec intruders by 
observing any change in that RF encrgy. Microwave systems are 
extremely veratile in tht one uit may be used 10 monitor an 80 by 
0 room or a 10 by 300 hallway 

‘The primary disadvantage of a microwave system is that it has a 
propensity to penetrate the boundaries of the building itis protecting. 
In other words, mictowave energy that is used to guard a bisiess 
sometimes reaches out into the parking lot, which understandably 
‘uses many false alarms, 

‘The detection of microwaves is actually very easy. The frequency 
they use, 10525 GH, is approximately that of police radar. Hence, 
‘when you ate near a’ microwave alarm system, x superheterodyne 
‘dar detector will sound. The close resemblance between microwaves 
{and radar has prompted people o call nese “radar systems" but that 
is technically inaccurate. 
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nce detected, quite frankly, there is not much one cam do to by- 
pass a microwave alatm in is capacity as a single component. 
However, they ae almost alvays pat ofa larger, cena stem 
that may be defeated. Thee are some passbities, however, for the 
‘determined burglar, but thee depend greatly on the circumstances 
For example, microwaves wil at penetmte metal Ione had prior 
acces tothe building being guarded, he could arrange metal objets 
(Ging cabinets, desks, etc.) 50 that he could reach his destination 
undeteced. Another method that may work would be fo the thief 
move very slowly. Microwave systems detect movement iit proends 
at more than two inches er second. That isined slow, but I supose 
‘one could conceivably move slower, Is very dificult forthe alarm 
‘owner to know enacly every nook and cranny that his alarm 
ronitors, and even more dificult to adjust it exactly a he wants it 
‘This may allow someone to crawl very low on the Nor, or very tight 
guns a wal, and escape deterion 

‘When burglar knows he sw encounter a microwave system, he 
‘saaly expects to silence the annuncatr (if local), or bypass the 
entire system (it monitored. As this goes to press, microwave systems 
ate sill uncommon for residential use, although they do ens. 
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Traps 
ennnnnnnnnnnnnnnn 


‘The components well cover in this chapter have been Inbeled 
“raps,” because their only aset in burglary detection is their incon- 
spicuousnes. If located, they are easily avoided or bypassed, so they 
are primarily targeted ai the amateur and inexperienced. The primary 
‘concern fr the thief then, i the location and recognition of the trp. 
‘Every alarm system i, in'a sense, a trap, but what sets the following 
‘components apart isthe fact that they are so easily avoided i they are 
simply recognized first. 

‘The traps that a thicf may encounter include the proximity switeh, 
‘the contact mat, plunger switches, lacing wite,gla-breke detectors, 
Seismic detectors, and trip wites. Neary all of these are exclusively 
sed commercially, yet some homeowners have incorporated them 
limo their system as weil. 

If you've ever seen those lamps and appliances that turn on and off 
bby merely touching them, then you've seen the principle behind the 
proximity switch. These devices set up a small field that detects the 
Dresenice ofthe slight electrical charge inthe human body. They are 
used only on metal objecs, suchas filing cabinets, and they erente a 
barrier of up to two feet around the object. More often, however, the 
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sensitivity i set to about 910 inches, to decrease the chances of false 
alarm. 

Proximity switches are easly noticed, because any metal object 
being monitored will be placed on “insulation blocks.” These willbe 
‘ceramic, conerete or some similar material that keeps the saf, fing 
‘abinet, desk, ec, ungrounded. One may simply avoid coming into 
‘contact with them, or he may resort ro other methods if he must get 
closer, to. manipulate a safe, for example. A long, non-conductive 
‘ripping device can be constructed (see Figure 11-1) to push, pall, ot 
urn anything that is necessary, It can be made of plastic, glass oF 
anything non-conductive, 


ea 


Figure 11-1 
Proximity swiches can be circumvented by using along, non 
‘omducve ering device manipulate provced objets. 


Another tap i the contact mat. They are usually located un- 
‘drmeath the carpeting in font of doors and windows, on stireases, 
nd down long hallways. Atypical mat cons of oppsing contacts 
that meet and close the circuit when pressures applied. Contact mats 
‘ome in standard rolls that are 30” wide. 

‘They are often dificult to spo, although thei tele outine under 
rug or caret sometimes evident. Burglar avoid walking directly 
jn font of doors and windows, and walk against a wall when tm 
ersing a balay that is over tht inches wide, When going up stair, 
he especially careful to walk on the edges ofthe sep, instead of 
fo the iat surfaces that may contain mats. 

Ae locates mst that i 00 large 1 avoid he may simply cut 
‘one ofthe wires leading tothe rest of the circuit In mest cases, this 
haphazard method of bypassing would almost certainly sound an 
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slarm, but the contact mat is unigue i that i i « mormally open 
switch, Therefor, if one of the wires is cat, twill remain an open 
switch, even if walked upon. The ultra-paranois thief may “walk the 
‘walls sing the spiked boots that telphone-pole climbers use, and 
void every contact mat posible. 

Plunger switches are sometimes hidden between the door and its 
frame (see Figure 11-2, so thatthe opening of the door aso opens 
the switch. They are rarely used when magnetic contact switches are 
in operation, These switches are also sometimes used behind paintings 
oF under statues, They ae simply spring-loaded, and if te presure 
‘taken ff the plunger, the switch opens. 


as 
lo. 


Figure 11.2 
‘Spring-loaded plunger switches ctisate the alarm when the 
hanger pops ont 


this switch is easy if one has prior acces tothe loation, 
but very dite fone doesn. The most common meth i to just 
assume itis ther, although one may keep in mid that 

inal prefer magnetic switches to plunger switches. To bypass it 
‘one may geo the wites fom the outside, snd jumper them. Or, he 
‘ay cut through the door, oF even tape the plunger switch closed 
luring the day After the door is opened slighty, one may even reach 
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in between the door and frame, to keep the switch depressed. For 
printings and statues, the best method is o slip a piece of sheet metal 
‘between it and the base or wall, o that the switch remains closed after 
the goods have been ited, 


‘Two traps that are best avoided are the glase-breae detector, and 
‘the wie-lacing trap. The glas-break detector isthe litle round sick- 
‘om switch located at the base of windows. Therefore it is easily seen, 
‘but dificult wo bypass. One could make # hole in the window with 
2 propane torch, and jumper the wires, but it isso sensitive, it may 
pick up on this activity. One could also beat the window violently and 
cause a fale alarm every day, 50 that the ower will eventually 
become so frustrated be removes it. Otherwise, burglars avoid the 
window that bas one of these on it. Wie lacing proposes an intresting 
problem as well. Tis wsuelly s wire grid in front of a window, 
‘ventilation shaft, or other small entry-way. The wires are intercon 
‘nected in such a way that they must be cut or broken to get by them, 
‘and this of course will sound an alarm. Often screens in high-security 
sorm doors are made of thin wire that cannot be successfully cut 
‘without tripping «switch. Skylight are also laced with very thin wire 
that breaks with any provocation. Jumpering this type i not common, 
because one never knows exactly where to jumper it. The sereen type 
‘may be detected with a multimeter and the regular type of lacing is 
plainly visible, s0 avoidance is not very dificult. 


Seismic detectors are very expensive and are, accordingly, reserved 
for high-security needs. Seismic sensors are completely passive, 
therefore thee are no detecable emissions that signify their preence, 
‘The system consists of « main proceso, and any numberof individual 
sensor, all of which are buried underground. The information is then 
sent (by wire or radio) to the control pene. 

The seismic sensor is programmed exclusively for the recognition 
of the distinct “signature” of human foothall. One could traverse a 
questionable area by hovercraft, but that is hardly practical. Walking 
‘ery sofly oF crawling to the target destination wil result ima seismic 
activity that is not recognized by the sensor, therefore the processor 
‘wll ignore it, The processors are programmed in this manner so that 
an alarm will not sound every time « squirrel, dog, or bird walks 
through the ares. Seismic detectors are wed primarily to guard road- 
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ways, so thieves who suspect their presence, enter in an unorthodox 
fashion. Seismic processors are always marked, so that they oan be 
‘exaly located fo repairs, [fone can find and reach the marker without 
tection, one can dig to it, and shut it off. Metal detectors are also 
used 10 locate the processor or the individual sensors, Incidentally, 
seismic detectors are almost never used residential 

‘The fina tap is the simple tip wire. Once wsed in the jungles of 
Viet Nam, it has found its way into the security market. These are usec 
to cover vast expanses, such as a factory warehouse or large show 

The tip wire itself isa thin string or wire, much like fishing line, 
and is stached 10 a switching mechanism (see Figure 11-3) on one 
fend and is permanently mounted tothe wall on the other. When the 
‘wie is stepped on or pulled, by attempting to cross it, the block is 
polled from betsieen the switch, thus closing it. The trip wire is used 
in low risk applications, because ofthe fact that its easly defeated. 


we Wall 
‘Switch Mount 


Figure 1-3 
A trip ive ras from an alarm circuit a wall anchor. 


Quite simply, tip wires can jst be stepped over or otherwise 
avoided, if they are seen. Novicing them should be easy in daylight, 
‘but a bit more difficult in darkened premises. Spray paint that con- 
trasts against the floor ean be used 10 locate them, fora litle paint 
will stick tothe wire, bot diffe on the floor. Upon locating these 
‘traps, most thieves prefer to cut the line instead of stepping aver it, 
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{in case they're forced to leave in a hury. A strong flashlight shone 
from the floor may also be used to reveal upcoming trp wites, BY the 
‘way, trip wires are usually located anywhere from 2” to 12” from the 
foot. 
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The Canine Alarm System 
AAA AAA AAA AAA AAA AAA AAAAAAAAAAA, 


Though technically not an alarm, & guard dog isan integral par. 
of many security systems. The guard dog is hardly an efficient alarm 
‘component, but it does offer some of the best criminal detereace that 
‘money can buy, For it takes a great deal of determination fora burglar 
to proceed when faced with a suring atack dog. We will be pri- 
‘marily concerned inthis chapter with how intruders subdue and/or 
jiminste guard dogs. Without preparation, this sneariy impossible, 
‘but with proper planning and precautions, it becomes quite easy. 
‘There are two types of dogs that a burglar will encounier. The fist 
fs the pet, wo i Kept for personal reasons, rather than burglary pro- 
tection. The second type i the trained attack dog, who wants nothing 
‘more than fo eat an intruder alive, Sine dogs are extremely tetitorial 
Jn nature, the family et may sometimes seem as ferocious asthe kller 
dogs, but most often they are more bark than bite. Personally, I would 
find it ery ficult 10 wse the same ruthlessness on x Cocker Spaniel 
5 1 would witha tained Doberman, but burglars have no reserve 
tions about resorting to these measures to achieve thei ends. 
Although thee are only the two categories of dogs, there are four 
‘ways in which they may be encouniered. Fist, and most common, 
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is the outdoor pet Hei usually Chine or ted to his doghouse, and 
the nly problem he presents is his nou-stop bathing. Another 
‘commonly een type isthe indoor pet, He may allack or bak hs ead 
‘ol, but usually be will be friendly after afew soft words, The next 
‘most common, and aso next in line in regards to danger, i the guard 
og. He is used in junkyard, ear los, oF anywhere ee where wayne 
‘on the premises would be an intrude. He is generally kept behind & 
large chain-ink fence, to protest the pubic at are from him. Fay, 
there isthe amack dog, which specially tained to kil anyone who 
enter his domain, They often run loose on large estates after dark, 
and protet it with immense loyalty and vigor. They usualy work ia 
teams and they are often upon the intruder before he kuows What is 
happening 

Depending on tbe type eocountered, there are diferent methods for 
eating with the various dogs For the rt type, the outdoor do, ene 
aay employ a number of aencing techniques. Thee are the obvious 
methods such as simply shooting him or giving him poisoned meat, 
but there sre also three more humane meio. Some thieves take (wo 
dogs wit ther, 8 male and female, whea they attempt to make a 
score The theory is and it seems ue that a dog would ruber carouse 
with a member of the opposite sex than worry about any intrudes 
‘Also, CAPSHUR i company that makes ranguiizes and guns that 
wl knock a dog unconscious fr afew hour. They sll toe pubic, 
if provided wit a good excuse. To silence the outdoor dog fora small 
petiod of time, one may aso wse the old mace/stun gun tick. This 
als epoca blinding the dg with mace, or siren, and 
then using @ stun gun to knock him down (and qu often uncon 
scious) The adventurous type may then atempl 19 murale him, but 
that sno Usually necessary. The above methods work forthe indoor 
og as well, but he may also be simply locked in 8 closet or bathroom. 

‘The guard dog behind the Fence can also be dealt with in a number 
of ways A blowzun, which is avalable from many commercial sup- 
plits, canbe used with poison dars to drop the meanest ofthe. The 
‘uatd dog is severally tained not to ea anything given to bisa by 
Stranger, but sometimes he may let 2 uy steak get the best of hm, 
and T've abo seen a guard do fed. pasiviy with Polish sausages, 
IFit were to comin & fast-acting potsn, such as eodoxin, a simple 
hotdog would have the same lethality as rie slog. 
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The attack dog wants to kil, and he is very good at his job, but 
he is ultimately stoppabie, He can be shot, blowgunned, or trangul- 
‘ed, but that takes a good aim, aot to mention steady nerves, A large 
Capture net may be cared, und thrown onto an approaching dog, but 
this quickly booomes futile when one is being approached by more 
than one. A more effective means of eliminating several dogs at once 
{sto cary a squir-botle that has been filed with formaldehyde o¢ 
Ihydroeyanic acid (se Poor Man's James Bond inthe Bibliography). 
If either is sprayed into the fae of the dogs, they wil be efetively 
denied any furtuer attack. The formaldehyde imitates the dog te- 
mendously, but the hydrocyunic acid will instantly Kill i. Another 
interesting’ method of canine contol is the high-frequency Dog 
‘Chaser, available from Electronics for Industry, In of Miami. The 
high-frequency thet it emits, creates extreme discomfort for any dog, 
and the closer he gets, the more painful it becomes, While the Dox 
‘Chaser unit in itself may sulfcentl insulate on from canine attack, 
itis generally used only as insurance against the possibility thatthe 
burglar’ other methods wil fi 
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‘The Local Alarm Panel 
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Below is drawing of a typical key-operuted control panel (sce 
Figure 13-1). Note that it is a very busic panel, and doesn't include 
such accesories sa panic button or zone contol. It does, however, 
have an entry/exit delay that allows one to enter or leave before the 
alarm sounds. 


Figure 34 
Atpica key epeated alarm como pane. 


‘The the possible settings for this particular panel are OFF, ON, 
snd DELAY ON. OFF shuts the cnie system down, and allows any 
component, perimeter tlarm of mation detector, 1 be violated with 
oil effects: ON arms the system immediately, and is geerally used 
‘when one is ready for bed. DELAY ON arms the system afer about 
«thirty second delay, which allows one to leave and lock the door. 
It als allows one to enter and disarm the system before the alarm 
sounds. Everyone pus their system on DELAY ON (although the 
‘wording may be different from panel to panel, when they leave home. 
Homeowners generally st the delay atthiny seconds, but it may range 
{rom fifteen to sisty, depending on the location of the panel. When 
{system is new, some homeowners et the delay time on fiteen 
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seconds, But when they walk in one afternoon with rvo bags of 
jroverie fumbling asoud forthe alas ke, the time wil exp the 
arm wil go of and they wil thea set the delay for about thy 
seconds. 

All one need to bypass this type of panel isthe Key. Rut if that 
ist posible, there are othe alternatives. Now is as good a time as 
any th dacs the proliferation of loksmithing knowledge. Anyone 
‘who as the slightest inclination towards crime has a saguering 
‘mount of locksmithing knowledge at his disposal. There are many 
books on the market that tell you how to pick locks, and even some 
that show you how to make your own tools A. poten thief may 
ven take an anoaymous handi-an coure in locksmithing from any 
ofthe corrxpondence school that offer such taining, Not oly wil 
they lear o pick all como leeks, but the tools are supplied as wel. 
‘Another beoefi of taking the cous that ney have the pivilee of 
buying profesional lock equipment though legitimate supp, and 
those suppliers are offen the only sources of many prods. With 
locksmithing knowledge, one may abo be able to make a duplicate 
‘ey forthe alarm, fier merely glancing a the orginal (on the owner's 
‘ey chan ata zs station, for example). fc aking the Foley-Belsw 
Insite’ locksmiting course, a person can open & lock, without a 
‘Key almost as fast ashe can witha key The security ofthe panel may 
be increase by using © Key switch ofthe tubular variety, the type seem 
most offen on vending machines. While somewhat dificult to pick, 
locksmith supplies sell a tubularlock saw that wl et the look, and 
allow one o ope it n'a mater of seconds. Every vat of contol 
pane, beyond the “El Cheapo ype, has tamper switch behind the 
Dane door. Any atlempt at geting tothe inside of tho panel ill 
Sulomaticlly sound an alarm, and there is rally not much a thief 
could do i he were to get there anyway. Therefore, the oly way to 
‘Socosflly shut dow he panel. is ia the key switch, 

‘Assuming one can pick, or otherwise compromise the lock the 
<iicuty lies im odng the pane! upon entry. It may be on the wall 
tear the door or iden in closet. Abit of sghtaime reconnaisance 
‘will evel whether or not the person entering has to make a dash 
towards closet, ori he remains near the door. Upon entering, most 
contro panel sat beping to remind you thatthe thy second deny 
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‘has begun. The beeping also leads burglar right to the panel. The 
panel must be nearby, to allow the homsowner to get to it in time, 
50 burplar does a systematic but mpid check ofthe mast logical panel 
placement, With a good pretext, thieves may even gain prior access 
to the premises and, with any Tuck, find it 

‘The same techniques for location apply to the next ype of alarm 
panel, the key-pad variety. The key-pad offers much more security and 
‘fien more features than the regular key type, Following is a fairly 
typical version of the key-pad pane (se Figure 13-2). Note that this 
‘panel offers many options, such as a panic switch for emergencies, the 
Abiity to “shunt” out certain zones, andthe ability to periodically test 
the system. But aside from the accesories, the only veal difference 
between this and the last type is that you wse a key-pad instead of 
key. A three or four digit code is entered vi the keypad which arms 
‘or disarms the system. The same code is used for both arming and 
clisarming, although different people may have different codes. 


Figure 13-2 
A more complicated alarm ciel panel, persed bya numerical 
eypad. 
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‘No amount of lacksmithing knowledge wil help aug tur this 
ase lf but there are many other ways to gt the disarming cose 
Depending on he ccumstances, it may be pasible to get the code 
tivough surveillance. Also, the owner's manual for many do-i- 
‘yourselfburglaalams has place inthe back co write he lar code, 
‘Many people do wit it down and stuff in a drawer somewhere, 
and that sometimes offers a dangerous possibility. Burglrs have also 
‘been known to just goto the paul and start with 001,002, 003, et, 
‘ntl they hit the right one. This i time coasuming, and the alarm 
would certainly sound, but when they finaly bit the right number 
they could call the neighbors and say, "Neighbor, this is Johnson up 
the set, that was jst me. No need to cll the cops.” Some of the 
newer modes, however, ony allow two wrong des to be entered 
‘before temporary shuting down. After the two minute delay is up, 
‘one eam enter two more codes, but i they are wrong, the system shuts 
oven for wo more minutes. Theoretically, itis sil posible wo come 
up with the right code ia this manner, But going from O01 to 999 
‘would take at least 16 hours, and going frem G00 to 9989 would 
take days 

‘A very elible way t0 get the code, is the UV jake method 
“Moments before the home or business owner arrives, large quaatty 
‘of Ulra-Vilet ink (available trom scenic supplies) i disributed 
‘on the door knob. When he goes to disarm the system, the residual 
ink on his hand wil remain 1 some degree on the keypad, and this 
‘an later be een under an Utra-Vilt lamp, It would then bea very 
Simple mater i deduce tbe posible combinations ofthe code. This 
technique always works fo left-handed homeowners, since they we 
ther left hand to both tam the doorknob, and arm the system Bat 
‘ightchaed people area bit diferent. The right-handed person some- 
times tums doorknob wit his eft hand then punches the disming 
code with his right, Burglars have conquered this problem by 
‘spinkling, with Utra-Violet ink a package tht beast pick up with 
his righthand. The package may Be inthe form ofa briefs, box, 
teashbag, of anything, but i laid in such manner, that a person 
‘would be obliged to ae his right haa to pick it up. 
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‘One last technique used for discovering the eode works only when 
‘one code governs the entire system. The control pane! is dusted with 
detectives fingerprint bit, and the latent prints should be revealed 
‘on the numbers that make up the code. two ot more codes are used 
‘ma house or busines, the dusting will reveal every digit of every code 
‘sed, and therefore this technique would probably be futile. 
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Miscellaneous 
Local Alarm Information 
A nnnnnnnnnnnnn, 


Before we bepin the study of monitored alarm systems, there are 
afew loose ends that need tying. Lec me reterte that there are thres 
‘major ways to defeat the simple local alarm. These include silencing 
‘the annunciator, bypessing the individual component, and shutting 
down the whole system. Of course, a combination of all thre is even 
riote effective, as professionals know that when bypassing alarms, 
‘there ino such thing as overkil, 

The first two weeks ater a new alarm system is installed, the home 
‘or business owner will ucideatly set it off many times. During this 
period, the neighbors or surrounding businessmen will dismiss the 
alarm signals as false alarms. Obviously, this is a wonderful time for 
the burglar to strike. (Of course, the best time is before they even 
install the alarm system.) 

‘Burglars also send away forthe literature thatthe alarm companies 
distribute. The literature often gives technical information and usualy 
has photographs of the different alarm panels. Under some cir- 
‘cumstances, this may aid in defeating the coatrol panel, If the 
homeowner displays a “This Property Protected by XYZ Alarms” 
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sticker, the XYZ Co, willbe pumped fo all the information they can 
deliver 

‘Another topic that belongs in the miscellaneous category is the 
proliferation of the “Dead Man Trap.” While exprestly illegal, some 
‘do-it-yourself types set up a contraption that is meant to maim or kill 
tn iniuder, rather than eatch him. This may be s loaded gun aimed 
ata window, a jewelry box that blows up in the face of anyone who 
‘opens it, ora sale chat is wired to deliver 50,000 volts to anyone who 
touches it. The homeowner who installs such a system had better be 
prepared to lose more in court than from a burglary. There are many 
fasts on record where an injured burglar actually sued and recovered 
thousaads of dollars from the homeowner he was burglarizing. Aside 
{rom being sued by would-be burglars, there ar ust too many dangers 
involved to consider this type of installation as actual protection. 
Finally, it may have occurred to the reader that when one aempts 
{to bypass component A, thee i very good chance that component 
B wil detect that activity. For example, if thief attempts to bypass 
‘@ magnetic switch by cuting a hole in the door with a chainsaw, it 
is likely that an ultrasonic detector will pick up this disturbance, and 
create an alarm. Or, ifone attempts to avoid window foil by euting 
athole in the window, the glass may fall onto a contact mst, and sound 
the alarm anyway. That is why most professionals omly bypass the 
‘components necessary to reach the contscl panel, where they attempt 
{to shutoff the entire sytem, This allows them to operate on the con- 
‘rol panel, without having to worry about any time delay mechanism. 


PART II 


Monitored Alarm Bypassing 


Aen 


In Part Three, we will discus: the variety of systems that are 
‘monitored by a central station. Rather than announcing an intrusion 
(ia bel, siren, etc), this type of system silently sends a signal to the 
alarm company where people ae monitoring for intrusions. This type 
of system, therefore, i often refered to as a “silent alarm.” Although 
‘one can obtain his objective by bypassing the individual components 
‘ofa local alarm system, when bypasing this type, one must shut off 
the entre system fo be succesful. The employees of the central station 
ate led to believe that the slarm i being shut off by authorized 
personnel. Therefore, burglars are not oaly aware ofthe techniques 
‘of bypassing this system, but also ofthe psychological maneuvers that 
ate necessary as well 
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The Central Station 
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years 
ppentialtargew for burglary, had slarm systems that were tied in 
rectly to the local police stition. As the use of burglar alarms ia 
creased, the police department began turning down more and more 
requests to be “hooked-up.” As a result there became a demand for 
central stations, or companies whose specialty it was to simply 
‘monitor burglar alarms. Most police departments will sil alow banks 
and large jewelry stores a direct link tothe police station, but as & rule, 
homeowners ae excluded. As the demand for security bas risen, many 
{guned agencies and burglar alarm installers have begun to offer cea 
ttalized monitoring as an option for their clients. 

‘When a silent alarm is installed, itis connected by a dedicated tele 
‘phone line to the central station. In the event af an intrusion, the eon 
tol pal on the premises being monitored calls up the central station 
‘and gives an electronic message tothe answering computer. I tells the 
ompuer eat which witch o sit as ee ved andthe 
‘compute then tells the operator what has happened. For example, 
‘burglar entered through a broken window, the panel would call the 
Compal op tnd tl tat sone foe window, as bon 
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broken, The operator would then see on his computer scree thas 
‘Acct. #1234, the Johnson residence, has had ove 4, the window 
foiling on te ivieg room window, violated. As the thief progrexed 
through the house the pane! would eal the computer fr every sensor 
that Was violated. The operator may then receive 1234-17, meaaing 
that one 17,1 Pasve Infra-Red detector in the master bedroom, bas 
detected someone. The operator would then be fally sue someone 
was inthe howe, so he would have thre options. He may just send 
his company’s armed guards to the scene, cll 911 and dispatch the 
police, or he may send bth the police and the guards (See Chapter 
19) 


‘When an authorized person enters through the designated entry/ 
exit door, he goes diretly to the contol panel, Using a key, or his 
push-button code, he shuts the system off, If he enters at a strange 
hhour, he must call the cena station and give them his password or 
‘code’ phrase. And so, sine the system was properly disarmed, the 
central station operator then pays no more attention to that particular 
‘oeount forthe rest of the night. Because of the time delay, the owner 
is able to shut it off before the panel has time to call up the central 
stations computer. This, coupled withthe fact thatthe owner calls the 
‘central station to give them his code, supposedly guarantees against 
fou! play. The premise here is that even if a burglar can got to the 
panel, and shut it off, will aot know the code word. I suppese the 
people who think that have never heard of bugs or telephone taps, not 
{to mention laser surveillance devices, parabolic and directional 
‘microphones, or the “Oops, I forgot my coat lastnight" (which 
‘ontained a Yoive-operated tape recorder) trick. The entry/exit door 
‘S another safeguard agains illegal entry tis designated by the owner 
1 the time of installation tobe the ONLY method of entrance when, 
the alarm is armed, That doesnt mean thatthe ovner always obeys 
this, but it causes the central station operator to be a bit more sus 
Picious if someone shus off an alarm, but does not enter through it 
Since the best way to bypass 1 monitored alarm is to appear to be 
authorized to do so, a burglar usually does some surveillance to de- 
termine the entry/exit door 


A central station has an immense amount of contol over the se- 
‘curity of its city. The central station keeps blueprints (containing the 
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‘alarm design) of cient’ buildings, the master codes and codewords 
for all alarms, and it sometimes even keeps copy oftheir keys. It 
also knows when their clients are out of town, and how log they will 
be gone. Ideally, a cenral station would be dn impenetrable fortes, 
‘and its employees woud all be unquestionably trustworthy, however, 
jn most cases, neither is true. Chapter 21, on Guerilla Tactics, will 
show how these weaknesses are exploited, 

would greatly benefit a thief fhe knew whether or not a system 
‘was monitored, endif so, by whom. Ordinarily, a security company 
‘ts its sticker on the doors and windows of a monitored house. The 
thief could look through the local Yellow Pages, to determine ifthe 
security company ws legitimate, and ao to determine bow fast the 
suards could arrive. A common way that is used to determine if a 
house is indeed monizored is wo throw a rock through a window. If 
‘bell sounds, ts more than likely loca, if there sno sound, but cops 
arrive moments later, iti monitored. After a house or business hts 
been determined to have # monitored system, there are several ways 
to determine the company that monitors it Less that the props 
target is Movie Rental at 716 Broadway Stret, One eould cal every 
alarm company in the Yellow Pages, and si, “This is the police 
‘department, do you monitor Movie Rental on Broadway?” Usually, 
an answer willbe given, but a reason for wantin to know should be 
prepared. Presumably, ne company will eventually say that they do 
‘indeed monitor Movie Rental on Broadway. Another way to Find out 
Who monitors the alarm is to stike up a conversation with the 
‘proposed victim, and ask him to recommend a security company, A 
les risky way isto throw a rock through a window containing fil, 
or otherwise break an alarm eompoaent, and soe who comes Gul to 
Fixit The name ofthe company is wually written 00 the service ruck 
for advertisement, but if not, the license plate is run through the DMV 
‘computer. In rural or suburban areas, on could also check the home- 
‘owner's mail forthe alarm company’s bil, 

‘An alarm company not only monitors for intrusions, but also for 
tampering and sabotage, Cutting the telephone lines, the power lines, 
or tampering with the contol panel, will bring the cops just as fst 
1s breaking down the door. Although leaving the telephone off the 
hook: will prevent the alarm company from contacting the howe, it 
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‘will not keep the contro! panel from contacting the company’s 
‘computer, brcause it features “Tine seizure” mechanism. That means 
that no mater what happens, an alarm signa will til get dhrough to 
the central station's computer. 


16 


Preamplified Microphones 


rns 


(One individual component was ot discussed in Part H, because it 
dlstncly belongs in the section on monitored alarms. This component 
isthe preampliied microphone, or preamp, a itis called. Is usually 
small black box that sts in centralized location, and listens for 
anything out of the ordinary. Many companies, noiskly Sontol Se 
cant, utilize preamps in addition to regular components. When the 
system is armed, the preamplifier sends sounds (via telephone wires) 
to the cen station, The preamp cam pick up the slightest noise, so 
thatthe ella sounds of» burglary betray the burglar even if the 
jother components do no. The preamp doesnot know the difference 
botween the sounds of burglary and everyday noises, s it alo sends 
barking dogs, sirens, telephone ring, and various ter “harmless” 
noises into the eas ofthe eental sation operator. 

Although they are sometimes detected with high-quality bug de- 
tector, itis often quite difficult ascertain whether oF not they are 
being used, However, if thie knows (or thinks) « preamplifier i 
being used, they are quite easly overcome. I, pri to execution, one 
alls the resieace or busines, the ringing ‘wil continue unt the 
burglar arsves I the burglar is very quit, the ringing will mask the 
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pojse that he is making, and the listener will be none the wiser. 
‘Similarly, a tape reconding ofa siren or badking dog is often used to 
‘create the same elec. 

Some security supply companies sella sound generator or jmming 
device that nllifes bugs and other microphones, but the interference 
‘that this creates may arouse undue suspicion, so i may nt be practical 
for ll circumstances. One method tha is practical, hawever, isthe use 
of & CB linear, ff CB radio that is comnected to a powerful linear 
(over 250 wats) is used near preamplifier, the only thing that the 
‘operator atthe central station will ear isthe CB conversation. You 
‘may think that this would immediately arouse the suspicion ofthe 
‘operator, but actually it probably won", because it happens all the 
time. Everytime a trucker witha powerful CB radio pases by «home 
‘or busines with a preamp this phenomenon occurs. 

Since preampliied microphones also capture the sound of an 
authorized entry, the code i usually just given aloud upon entering, 
0 the operstor can shut of his system. This code, then, is extremely 
exsy 10 surteptitously obtain, 
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‘The monitored contro! panet does’ differ greatly from the local 
control panel. Tis usually key operated or push-button controlled, and 
the same techniques of lcksmithing and procuring the alarm codes 
apply to it. It does, however, have «few extra features that merit it 
an individual chapter, 

A hold-up switch or panic button i usually ted into a monitored 
alarm system, Sometimes several are scattered throughout « home or 
business, and if any are presed, it immediately sends an emergency 
signal 10 the central statin, The central station is generally ordered 
not to eal the premises on a hold-up alarm, but rather 10 call the 
police immediatly. There isa hold-up alarm in every bank, con- 
Venience store, and liquor store in the country, although they are 
usually disguised. Some are foot-pedals, while others are x metal dip 
Sevice with a removable banknote betweon the contacts. A residenta! 
panic button work inthe same manner, although itis rarely disguised. 
“Many systems allow a witeless panic button to be placed by the bed, 
se that one can push it without going to the pane 

‘Another feature of the monitored alarm panel is the duress code, 
‘A ures code dsarms the system, but atthe tame time sends a distress 
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signal to the central station, Ifa thief breaks into a house while some- 
‘one i home, he may threaten to kill the homeawner if he does’ pve 
‘him the disarming code. The code is given to the thief, and it infact 
docs hut the system off. What the burglar doesn't realize is that in 
five minutes the home wil be surrounded with cops. This would work 
almost every time, ifthe security industry had not standardized their 
duress procedure, Every company that T know of advises is clients to 
add 1 to their regular code to send a distress signal. For example, if 
your regular code is 1234, and a burglar demanded the code fom you, 
‘you would give him 1235, It would disarm the sytem, but also notify 
the central station that there is trouble. The problem here, i that an 
intelligent burpar could just subtract 1 from whatever code you gave 
him, and try it fit. Ifthe system disarm afer subtracting 1, then the 
‘ode the homeowner gave was the rick, or duress code. I it does not 
slisarm afte subtracting 1, the homeowner gave him the correct code. 
Either way, the burglar escapes the tap that was st for him. 
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Pavlov’s Dogs Effect 
AAA AAA, 


In the nineteenth century, Ian Paviov conducted an interesting 
peychological experiment. He rang a bell every day before feding his 
‘dogs, and eventually the mere ringing ofthe bell caused the dogs to 
‘alivate, This was the frst scientific recognition of what is known to- 
day as n conditioned response, What hus this got to do with alarm 
bypassing? Not much, hut the same conditioned responses have their 
use forthe erafiy burglar. 

cause some alarm components are very seasitive, they are often 
prone to false alarms, and, duc to mechsnical fire, some com- 
ponents are more prone than others. In addition to this, there are re- 
Curring incidents, such as a loud truck hat drives by a certain spot 
every evening, or a manager who always takes too much me to get 
to the panel, or many other evens, that send an slarm tothe station 
every day at the same time, 

‘Obviously, if this goos on for any length of time, the operator will 
begin to expect it, and then to ignore i. I remember an alarm that 
belonged to a storage company that would come in almost every 
Aight. The ist few times, we sent the police to investigate it, bu soon 
‘we began sending only our armed guards. Although we repeatedly 
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‘et servicemen to try and fix it, we eventually began to accept it and 
then ignore i. You may have guessed that when they were burgled 
‘month ltr, our company was usable to explain tothe owners Why 
‘we dd not respond to the alarm, 

1 was a textbook ease ofthe Paviow’s Dogs effect. The secret of 
this technique is to make a single component rng into the ceatral 
sition everynight ors. Eventually, there wil be 0 mich laxity to- 
‘wards that individual account, it can be violated, and the palce wil 
probably never even be tified. While the ideal situation cals for 
olating a single component, burglars sometimes find it nesesary to 
violnte more than one. This game, however, i aot payed as long as 
the single component game, because a much more in-depth invest- 
gation wil he made by the slarm repaicmes, I also poole to use 
the Pavlovs Dogs effect on local alarms, by geting the neighbors and 
police ied of responding to ale alarms, but itis more effectively used 
‘when the alarms are monitored. 

‘Ther is another advantage fo the burglar if he causes large num- 
ber of file alarms at a particular location. With the increasing number 
of false alarms, many’ police man-hours are being wasted just re- 
Spending to them. Ths as prompted many cis to adopt 3 alarm 
ordinance. The ordinance only allows home or business cwner a 
certain number of fae alarms during a thy day period, and if that 
limit i exceeded, their alarm license will be temporarily revoked. If 
someone's licens is indeed revoked, an alarm cannot be reported to 
the police during the punitory period, Obviou if an accounts only 
‘one alarm away from violating the ordinance, the central sation 
‘operator is going to be quite appchensive about notifying the police 
the next time an alarm comes in. The operator wil certainly 0 call 
S11 if there i any doubt as to whether of not there a cal ine 
trason atthe locaton. You may rest assured thatthe profesional 
burglar can quote the elarm ordinances of the cities in which he 
opertes 
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Police And Guard Responses 


AAA AAA AAAAAAAAAAAA, 


‘Although a burglar may proceed with caution, defeat every alarm 
‘component insight, and shutoff the whole alarm pane, there is stil 
‘chance that he may make a mistake. I the mistake is insignificant, 
no one ever knows about it, and his mission comes off smoothly, but 
ifthe mistake raises the suspicion of the central station operator, it my 
result in the dispatch of guards or police tothe premises. The pro- 
fessional burglar recognizes this possibility, and often takes steps 10 
‘minimize the risks and dangers of getting caught, With enough plan- 
fing, not only will his mission be accomplished, but the burglar will 
also probably cape. 

fa burglar creates a silent alarm, or otherwise arouses the suspicion 
‘of the operator, the police, guands or both, may be sent Ifthe alarm 
‘company hae i¢ own mobile guards, it will dispatch them tothe scene 
via radio, Ths radiofrequency i easly discovered by networking with 
scanner enthusiasts, or by writing the FCC. Once the frequency is 

the burglar can listen to and follow every move of the 
ards. Ifthe guards are headquartered at the central station, a con 
federate can ksep the place under surveillance, and watch the guards! 
activities. If they suddenly go to their vehicles, and proceed toward 
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the piace being burglarized, the coafdant will nf the burglar by 
‘allie If the pote take sarge enough, uraars may even 
have several cars stategicaly placed along all posible routes that 
guards and police mus use to ative atthe scene. they observe ay- 
thing relevant, they will notify the burl. They may slso bug the 
central station (see Chapter 21 on Guemila Tactic) to determine 
wheter or not the guards willbe sent 

Ita company does nt have guards, oF if they fel the police would 
be beter esuippe to handle the situation, hey may just call 911, The 
‘operator wil tlt the police Jeparea’s dspaher, and el him 
that he hasan “alarm drop” at such-and-such adres. The police di 
atcher wil then not a nearby uni, by radio, tat he recived ell 
ffom XYZ Secary, and that he should go check tout. The burl, 
who also asa scanner preset to the police fequeney, has ako beet 
notified, and is mysteriously gone when the police arrive. The fre 
‘quencies of local police departents are easily bain fom low 
‘canner ltenes or from dhe Rao Shack frequency guidebooks, 

‘While the above techniques wil workin most cases, there may be 
times when a guard or policeman aves, without te burglar knowing 
about it If this coeur, its usualy during a routine neighborhood 
click, or when a policeman is topped and divened to the scene by 
8 suspicious neighbor. Tis, however, sso incredibly rare that the 
chances of being caught in this manne’ ae almost. 

‘burl thinks that he has chance of geting eaught, he may 
bain authemtc or counterfeit eredentils and document tha provide 
2 piauble excise for his being there. Wile Suton the famous bank 
robber, even went so far as make a complet, but phony, police 
Uniform to throw everyone off of his wal. This tecinigue Would 
‘obviously have its uses in housebreaking a well, 

Professional burglars also know better than to hide on the premises 
to avoid capture. After the guards and police acve, and vey an 
actual point of entry (POE), the police department will bring Ou it 
Kamit to “sniff ot” the place. Anyone hiding it the home ot 
business wil be found in & mater of minutes. I seems tht thieves 
‘would rather take ter chance as a moving tg than wo be a siting 
duck by hiding under bed. If one ens ina conventional manne, 
‘sch as through the front door, he usually takes caret lack it behind 
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him to give the appearance that nothing as been disturbed. Ifa guard 
fr policeman arrives on the scene und doesn't notice anything 
suspicious, and doesn’t see anyone inside, he will usually proceed n0 
further, and write it off a5 a mechanical fallure, Obviously, if a thief 
‘ses a crowbar to open a door or windaw, no one wil think it was 
merely a fis alarm. Closing and locking the door behind him also 
‘minimizes the rik of being caught during a routine door check, which 
is quite common in some cites, 

Finally, it should be known that professional burglars are acutely 
aware that most guards re ether 18 and just out of high school, or 
‘over $0 and exiromely out of shape. Either way, they ate poorly paid 
‘and extremely indifferent 1 their company and clients, They have n0 
inherent loyalty toward thei employers, and this generally provides 
an incredible opportunity forthe resourceful burglar, Its obvious that 
five thousand dollars in the hand of w $3.50 per hour security guard 
will sometimes make him look the other way for au hour oF 0, 
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Television Monitors 
And Auto-Dialers 


RA nnnnnnnnnnnnnnnnnn 

‘Closed Circuit Television (CCTV) cameras are used around the 
world to keep vigil over areas that are potential scenes of criminal 
activity, In many cases, « guard keeps watch aver several monitors, 
for the cameras are connected to VCRs so that they may be reviewed 
later. Cameras may also be connected to motion detectors, so that if 
anything i detected within the camera's Geldof view, it will sean for 
the intruder. The motion detector sytem is used whem a guard has 
to: monitor such a lage number of cameras, it would be difficult to 
‘watch them all simultaneously. CCTVs are frequently seen in hotel 
lobbies, at bank ‘eller windows, and other areas where the very 
presence ofthe camera deters erime, Ia reality, however, eumeras do 
very litle to guned agains professional burglary. 

‘In the movies and on television, there is a variety of methods used 
to defeat the lowly CCTV camera. Some thieves spray shaving cream, 
{no or tape cardboard over the lens. MacGpver simply places a miror 
infront ofthe eamera, and the Missin: Impossible team tap into the 
coanialeable, and detivers a phony picture to the Third Word guard, 
Fortunately, or unfortunately, depeoding on your viewpoint, it i 
‘never quite that simple. CCTV cameras have the uncanny ability to 
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penetrate seemingly opaque objects, therefore the shaving cream/ 
txtdbcard method would probably not work. A mirtor placed in font 
of a lens would be a definite giveaway for an observant guard that 
something was askew. Finally, the “tapping into the coax" trick would 
involve so many tial and error adjustments that no one could get it 
‘ight the first time, let alone convinoe a guard that nothing out ofthe 
‘ordinary had happened 

‘The primary characteristic of a CCTV that allows for easy bypass 
is its oustanding visibility. This fact alone allows an observant thief 
to watch the scanning rate of the camera, and do his “work” during 
the periods when the camera is looking the other way. There are often, 
atlempis made to disguise « CTY, but any suspicious box aimed at 
‘sensitive area is automatically assumed 10 be a surveillance camer, 
Sometimes video cameras or slow-speed Super-Smm cameras are 
hidden in liquor stores and gas stations, and are turned on by a hidden 
switch or foot podal. These certainly won't deter erime, since the 
‘amatcur criminal doesnt know they'te there, nor wil they apprehend 
‘many professional criminals, since a pro would obviously wear a mask 
‘or disguise during such a operation. 

There are wo more video surveillance devices that are practically 
useless for criminal detection. First isthe phony TV camera used in 
some stores to foo! people into believing that their every move is being 
‘watched, This does deter shoplifing among amateurs, bt proftsion- 
als know them for wht they realy are. Some of these fake cameras 
‘can even scan and they may appear to be completely authentic, but 
a professional tie is more aware of current security products than 
the store owner, and has undoubtedly studied the brochure on these 
jhony cameras as well. The second device that I fea is vitally useless 
for criminal detection isthe stilLframe tansmiting camera. This type 
‘ales a sil photo of an area such as a parking lot, and transmits & 
fictuce, through the telephone lines, to a monitor that is connected £0 
the same phone line. The monitor may be anywhere in the world, 
provided there i telephone service to that area. But the monitor only 
receives a new image every minute or $0, so that anything that 
transpires in the minute between one picture and the next, wil go 
‘unnoticed. Also, ifthe telephone lies to and from the monitor are 
cut, there is no more surveillance until a repair erew can get to the 
sight to mend them. So much for security. 
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There are two more techniques for defeting the surveillance 
‘camer, and tei we depends on the manner in which itis monitored. 
IF the camera is connected to a videotape recorder, the leas may 
simply be covered wi glob of modelling clay, or any ote, 
rmoldable opaque substance. If this is done, no activity in the 
‘monitored area wil be captured on film. If the camera is being 
‘ocitored in eal ime by a guard o policeman, an FM cxilator (the 
type sold in novelty catalogs to interfere with TV and radio 
trosdests) cam be steed to produce several hundred wats If his 
device is brought anywhere near a TV monitor, the picture willbe 
reduced to snow and sate. 


The autodiler i equally worthless in preventing profesional 
burglary. The autodialer isa device that eal a cent station or 
police department onthe telephone and delivers x short pre-recorded 
‘message that there i burglary in proges. There may alo be otber 
umber listed such as those of fiends and neighbor in ease some 
ofthe other cals didnot get through, Mader autoialers have alne- 
seisng mechanism that dsallows jamming the lin, by calling the 
residence prior to the housebreaking, for example. They are usally 
Fidden and housed in a locked box for added protection, but even 
ith tes safeguats the value of te autodaler a a secunity device, 
{is practically ail. 

If the alarm that is connected to the dialer cannot be bypassed, the 
telephone ines cannot be ext andthe lock onthe housing cannot be 
picked, there ae sill several more ways fo defeat this tem. Since 
‘utodilers ar silent to the homeowner as well asthe burglar, they 
fe party 10 many fabe alarms Tas fact has prompied many cts 
to ban the use of autor, since so many police man-hours have 
been waste responding fo them. Inthe cies that do allow them, the 
omeowoes have been advised wo instal abort switches in the home. 
‘A Teast one abort swich, which shuts the daler of immediately, will 
te placed near the dialer, inthe master bedroom, or near the contol 
pane. Of couse, some dials havea simple oa/aff switch on them, 
tnd they must ely on concealment alone o beat the bugles. However 
in the average home, there are not too many places that one can 
adequately hide something a lage as an suo 
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Pebaps the quickest method to defeat the astoaer ist simply 
erase tie tape. Since the mesage i recorded on magnetic ape, an 
Sletromagntic alk erase wl ave the tape completely blank. This 
Gan als be done witha regular magne, provided i is powerful 
‘enough. The fact that this can be done without removing or opening 
the protesive cover, makes ta parila dangerous posi, It 
the tape subjected to a powerful magnt, even if the cll Bees 
throu the pole, they wil bear thing Bat constant ising 
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Guerrilla Tactics 


‘These may be cases when the burglar cannot bypass or avoid an 
slacm system, therefore he may have to resort to goers tactics 10 
accomplish his goal. When Tsay guerilla, I mean a method of attack 
that isso unorthodox, no one could poasbly expect it. Although the 
term guerrilla generally conjures up images of brutality and 
ruthlessness, the team here means simply that the tactics that are 
employed are so unique, they generally leave everyone, including the 
police, temporally stunned. Guerila tactics re usually only aimed 
At central tation employees, or the central tation itself but they may 
also be used against the police department, if the need arses. 

Ideally, the cenirl sation would be a veriuble fortes. Unfor- 
tunately, they are mest afien arene building in x bad neighborhood, 
‘or leased nit in an office complex. The only security system that 
protects the ental station is usually a TV camera atthe front door, 
and a simple local alarm, Sometimes the sales office, where one must 
0 lo inquire about having an alarm installed, is adjacent to, or part 
Of, a central monitoring station. There would obviously be much 
information wo be gleaned, if one were to plant a buaging device or 
tape recorder near the central station, during his alarm inguiy. 
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Similarly, an Infa-Red inser surveillance device could be shone on 
any window to pick up the juicy central station gossip. If prior acoess 
js impossible, the telephone wires may be cut at the meter base, 
although most central stations have standby generators, in case of a 
power failure. 


The employes of a ceatial station ako offer the burglar some 
unigue possibilities. The poorly paid central sation operator is ex- 
tuemely suscepti wo bribery, and ho may be it 
1 disguised ging deve ihe is unaware of what i i. A bug de 
suse as an engraved ink pen, for example, may be givea to him as 
2 in hops that he wil easy i around with him, and especialy 
to work, Other employers ofthe ageney, such a installers, can also 
be bribe or indice into inalinga sytem that would be very easy 
to defeat The insaller may also know, and be wiling 10 sell, the 
‘maser code that contrls someone's system. The patrol cars thatthe 
urmed guards use wien responding to an alarm drop may also be 
made useless, by slashing the tis, placing ealtrops under the tires, or 
fling the roads ner the proposed target with ach, broken las, and 
calito. The engine, gas tank, and wansmisio, may als lve 
to various methods of incapacitation. In smaller cities, where 
comparatively few alarms ae monitored, only one or two employers 
work the Midoght to 8 A.M, shift. During this period, the eatal 
station eould be sormed, and de employers detained. Als, poisonous 
or anesthetic gas eould be introduced into the central statin, so that 
the operators would be disabled. Operators could aio be extorted for 
sensitive information, if one could find the proper maivaion, such as 
threat, money, blackmail, te. Police departments ae less vulnerable 
to guerilla tats, but they are certainly not invulnerable to hem, At 
a smal town police department, squad cars could easily be ineapac- 
itated inthe same manner as described previously. Although es likely 
tobe bibed, policemen can sometimes be reswed ia. king ther 
sgeodnatured ime whee responding to an alarm drop. The burglar 
‘oul ako place several obsaces along the route the paceman would 
‘ake, so that he Would be delayed in geting tothe scene 

The sation itself can also fll vet to sabotage. A burglar ould 
bug police sation and learn a grea dal such a information on 
potential urges o police schedules. confederate may aaa lien 1 
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the police station conversation to discover whether or not an alarm 
fas been made. And since th alarm company mst el the police 
Separmeat to report he alam, the incoming telephone lines may be 
tapped ito or cat. Since th police department has Kimi number 
(91 and routine lines, i alo possible for several recruits of an 
{eligent buralr to flood the 911 lines, so thatthe ental station 
faint wet through to. osfy them of a alarm. This i easly ac- 
omplisbed in the smaller police department since they wsually have 
no move than five incoming lines. The telephone also offers the 
posaby of using a decoy. This involves cling the police station 10 
{Gt them ofan awl wreck, brealein, apei-proges, etc so that 
the poucemen wil be dipuched 1 that area and the burglar can 
work (the opposite sie of town) unhindered. One possiblity in 
Usfeung a lange police deperimen, where patrolling policemen are 
‘dspmched to alam drops by radio, would be 1 actually overie the 
Fequeacy with another tansmiter, Ths wosld be extremely 
Expensive 0 do therefore the stakes would have to be very high. 


PART Iv: 


{In the fourth and fina section, we will examine the phoay burglar 
alarm sytem, and how itis 0 easly ecopnized. No longer ar these 
jut the product of the do-t-yourselfr, but are ako being produced 
‘commercially at am ever-increasing rate. There seems to be an 
fnaatlable demand for thew devises that supposedly scare eximinals 
away. You wil ing, however, that they sometimes 60 more harm 
than good. We will abo cover some random topics tht, although 
‘elated to slam bypasing, could not be appropriately paced in any 
ofthe preceding chapters. Finally, we wil cover the state-of-the-art 
security systems being inaled today, and dhe future alae systems 
‘that il be installed tomo, 
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Phony Alarms 
nnn ninnnnnnnnnnr 


Surprisingly, itis generally bleve thatthe burgh alarms primary 
tas is deterng, not esting criminals. While i is true that many 
thieves wil no eater a Gweling tha they belive i guard, perhaps 
the mest dangerous type of criminals will probably dsepard it. The 
druperazed kid who eds some quick cash for his next fi will 
probably not pay any attention to an slarm. Nor will a mentally 

Setanged criminal, who probably doesn’ even care if anyone is home 
ors Fartoemc ove en tn th osc apr Bes wo 
‘apprehension abou entering building that on ap antic alarm 
system, much lesa phony one. The profesional wil ot be impressed 
bythe Mashing lights and warning sicker, but rather will recognize 
itimmediacly as «complete eam, 

Te dots take a reat dal of detective work to determine whether 
cor not an alarm system i authentic. On page 98 & a typical phony 
Slarm panel (ce Figure 22-1) fis generally sleonspicwous 
location, such as nea the front door, and it usually has ard lashing 
‘ight. This presumably wars tht the sytem is armed, and is currently 
‘monitoring the premises. Rarely, however, are actul control panels 
‘mounted out of door, to be subjected to vandalism, and never are 
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they mounted with simple Phlliprhead screws. The panel below is 
actually just a key operated switch that wil simply turn the re light 
fon and off. Since the homeowner knows his sysiem is spurious, he will 
‘occasionally forget to disarm his system before entering his home, as 
surveillance will prove. 


igure 22-4 
A phony alarm control panel sey spot 


Stickers that warn of alarm systems abound in electronics and 
‘ovelty stores. Authentic slarm stickers display the manufacturing 
company’s name and/or logo, but the generic “This Property 
Protected By Electronic Alarm System” stickers are painfully vious 
for the initiated (sx Figure 22-2 on page 99). A professional burglar, 
‘when seeing a fake alarm system with phony stickers, may become 
even more intrigued with what you are trying to protect than he would 
if thece were n0 alarm at all 

‘While some security books say that a few flashing lights and an 
impressive locking key-switch wil deter thieves, I believe the money 
‘would be better speat on a real alarm. Even though a professional can 
defeat it real alam has the capability of catching a thief, rather than 
jst the hope of scaring him away. 
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Figure 2222 
Phony clarm stickers may tract mare criminals tha they dete. 
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Related Subjects 
LO nannaaannnaannanananaaneananananannanl 


‘The purpose of this chapter is to examine some ofthe more eterie 
subjecs related to alarm bypassing. Basically, thre are four random, 
‘ut import thoughis that nee elaboration here. T decided to pile 
them intone caper, rather than spread them through the book 
‘where they would normally belong, fr fear that her immpertance may 
have been inadvetelly missed, 

First one should know the various steps that some profesional bur- 
ars take 1 improve their chaners of acess ona pariculr mission. 
Before, during, nd after a burglary, there are many techniqus that 
may be employed that vitally guarantce thatthe heist will come off 
Smoothly. Some techniques, such as wearag gloves to avo Knger- 
prints and wearing x mask to avoid being fecognized, are obvious 
‘Othe techniques, suchas planting “artifiial™ cues, are not so ob- 
vious. The nemesis of any criminal is betraying cue that links him 
tohis crime. Often this betraying cu can tak the form ofa disnctive 
‘mods operandi, Burgas who maintain the same procedure of 
housebreaking for any length of time may find it ecesary to change 
their B and E techniques. One of the hallmarks of tre profesional 
Bs his ability to look incompetenily smateur. Broken windows, smash- 


102 ‘TECHNIQUES OF BURGLAR ALARM BYPASSING 


‘doors, crowbar pryings all reck of amateurdom, and effectively 

‘row the ensuing investigation off the scent. The only drawback of 
appearing fo be a rank amateur i that one may obiain the sam results 
(uch as setting off an otherwise easly defeatable slarm) that an 
amateur would 

‘Second, wher an alarm is monitored by « central station, the 
‘operator reccivesa signal fr every alarm component violated, He also 
feceives a signa for every component that Its been restored. This 
‘means that when a door, that has been opened, is suddenly closed, the 
‘operator receives a signal that corresponds tothe restoral af that par 
ticular zone, This may seem ietlevant, but if an operator receives 8 
Violation, and then arestoral, he knows the door has been opened and 
then closed. Ul however, he receives only a violation, with no restora, 
hhe may be a bit more inclined to believe thatthe violation i «false 
alarm, since a person would obviously elose a door behind him. 

A consiamt source of debate among my colleagues and 1 is the 
question ofthe best time for a burglary. Of course, this depends tre- 
‘mendously on the circumstunces, but there are times that are more 
‘conducive to success than others. For example, during an electrical 
storm, & central station may receive dozens of false alarms. Ifthe 
electrical storm occurs on a Saturday afternoon, the endless comings 
and goings of store owners, coupled with the false alarms from the 
storm, keep the operators s0 busy, they may not be able to bandle all 
ofthe incoming signals. Similarly, if a burglar were to brea into a 
building fifteen minutes before it was scheduled to open, the operator 
Would probably dismiss any alarm as a1 employee having trouble 
clisarming the ssstem. 

Finally, one should be aware of the peculiarities of some local 
annuncators. It would seem that if « burglar cut off the power to a 
‘ell oF horn, and caused it to sound, the batteries would eventually 
‘wear down, If this were to happen, the whole home could, of course, 
be ransacked without sounding an alarm. That is why most sirens, 
balls and hors of a local sytem, run for about ten minutes before 
shutting themselves off, so that they may preserve battery power. 
Obviously, one could keep causing the alarm to go olf, and the 
batteries would indeed run down eventually, but the chance of being 
‘caught increases with every alarm. 
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The Future 
Of Security Systems 


Anns 


‘As we've seen, most of the components of a modem burglar alarm 
sgstem have several Qaws that professional burglars can exploit to 
render the entire system useless. Bt homeowners want to know thit 
they are safe from the profesional burglar as well a5 the amateur, 
therefore cost is no longer the sole determining factor when they buy 
an alarm system, 

‘Burglar alarm manufactures are aware that some of their products 
are extremely asy to bypass and some are going back to the drawing 
‘boards to try and devise new and more secure methods of burglary 
detection, Some ofthe newest methods are bio-mechanical, meaning 
that they are based on the characteristic iioeynerasies of an in- 
dividuals body. Still others use an ever-changing coding pattern, so 
‘that no repetitive motion can be copied by someone not authorized 
to enter. For example, there are key-pads on the market today that 
‘cannot be scen from any angle except straght-on, and the numbers 
are abo scrambled into a different patter everytime. Thus, the same 
numeric code would use different butions each time, so this would 
‘certainly nullify the Ultra-Vioet ink method described in Chapter 13. 
Furthermore, magnetic cards are sometimes used instead of numeric 
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cads, to arm and disarm burglar alarms, but rately in high-security 
situations, since they may simply be stolen from theit owner, 

‘Will the security indusry ever stumble upon a technique that ean 
‘not be compromised? I da't know, but I'm afaid I have my doubts. 
[the alarm is bio-mechanical, an authorized person could be drugged. 
and brought tothe alarm panel, and the alarm could be allowed to 
‘check fingerprints, eye patterns, or whatever els the alarm needed for 
Positive identification, A voice could also be recorded digitally, and 
played back, ifthe alarm checks fr voice prints. Foran alarm system 
that requires the input of a eode, a person could be threatened with 
violence, beaten, drugged with sodium pentothal, or more humanely, 
hypnotized, so that he wl revel the code. 

One possibilty for increasing criminal detection would be to 
develop an entirely passive sytem, so that it could not he detested by 
‘burglars. Or, one could 1g a system that did not arm until someone 
‘opened a door or window. That way, » burglar could not detect the 
presence of any alarm from the outside, and would probably deem 
isle to enter. Also, the annunciator could be made to notly the 
neighbors silently rather than blue throughout the neighborhood (on 
an easily defeated outdoor bel) 

Some companies are now manufacturing stress sensors. These 
‘ltrasensitve units can measure any slight movement down to a few 
tilionths of an inch, They sound en alarm when anyone walks 00 
the stars the soot, or any other area, They are generally placed on 
structural beams, although they wil ako work if mounted wo the wall, 
Of course, stress sensor or any other component is useless if itis 
attached to a central processor that may be easily overcome. 

There may come day when security systems become so advanced 
that no one but authorized personnel can disarm them, There may 
come a time when we ean arm our burglar alarms, and feel certain 
that we are safe from all types of criminals. But tha time is not now, 
forthe vast majority of alarms installed inthis country are mere delays 
forthe determined and experienced burglar Alarm salesmen usualy 
emphasize how secure youl be und feel with a propery installed 
‘burglar alurin system. You may eel secure, but you will certainly be 
far from it T sincerely hope that someday well all be safe in oar 
homes, but T know, as you do now, that we havea long way to go. 
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